breach in security - All users can see each other databases

M

Mauro Carvalho

Guest
All users can see each other databases by modifying the link of "Webadmin" that give them access to phpmyadmin:

For example:

Changing de ID number of the link e can access to another user database

https://IP/domains/databases/db_webadmin.php?db_id=2&previous_page=db

can anyone help in this matter,,,,

best regards
 
Back
Top