Server side template injection using documentation (Video Solution) | 2021

Referer-based access control (Video Solution) | 2021

Multi-step process with no access control on one step (Video Solution) | 2021

Insecure direct object references (Video Solution) | 2021

User ID controlled by request parameter with password disclosure (Video Solution) | 2021

User ID controlled by request parameter with data leakage in redirect (Video Solution) | 2021

User ID controlled by request parameter, with unpredictable user IDs (Video Solution) | 2021

User ID controlled by request parameter (Video Solution) | 2021

Method-based access control can be circumvented (Video Solution) | 2021

URL-based access control can be circumvented (Video Solution) | 2021

User role can be modified in user profile (Video Solution) | 2021

User role controlled by request parameter (Video Solution) | 2021

Unprotected admin functionality with unpredictable URL (Video Solution) | 2021

Unprotected admin functionality (Video Solution) | 2021

File path traversal, validation of file extension with null byte bypass (Video Solution) | 2021

File path traversal, validation of start of path (Video Solution) | 2021

File path traversal, traversal sequences stripped with superfluous URL... (Video Solution) | 2021

File path traversal, traversal sequences stripped non-recursively (Video Solution) | 2021

File path traversal, traversal sequences blocked with absolute path bypass (Video Solution) | 2021

File path traversal, simple case (Video Solution) | 2021

Server-side template injection in a sandboxed environment (Video Solution) | 2021

Server-side template injection with information disclosure via user... (Video Solution) | 2021

Server-side template injection in an unknown language with a documented... (Video Solution) | 2021

Server side template injection using documentation (Video Solution) | 2021

Basic server-side template injection (code context) | (Video Solution) 2020-2021