digininja / DVWA

Damn Vulnerable Web Application (DVWA)
GNU General Public License v3.0
10.36k stars 3.65k forks source link

buggy authbypass #587

Closed sl33pingmathrapt0r closed 1 year ago

sl33pingmathrapt0r commented 1 year ago

Added exit; statement to stop leaking feature/vulnerability to High and Impossible Levels

""" There are bugs in the get_user_data.php and change_user_details.php files that makes the High and Impossible levels of Authorization Bypass unintentionally vulnerable, sharing the same leaks as Medium. This is not intended, following the Help message.

Rectified the files by adding exit; statements where necessary. """