$800 Authentication Bypass Bug Bounty POC 2023 | Broken Authentication & Session Management | P1
The application does not require a valid session for any page on the server, for example, you can access 'password.htm' which allows you to change/disclose the admin password with just a few clicks.
-----------------------------------------------------------------------
Twitter: / abhishekmorla
Website: https://abhishekmorla.netlify.app/
Linkedin: / abhishekmorla
------------------------------------------------------------------------