CodeAstro Complaint Management System Privilege Escalation Vulnerability in delete_e.php Component

A privilege escalation vulnerability has been identified in CodeAstro Complaint Management System version 1.0. The issue arises in the delete_e.php component, where a remote attacker can manipulate the id parameter to delete engineer-level accounts. This exploitation can be carried out without a valid session or any privileges, as the endpoint lacks proper authentication and authorization checks.

Impact

Exploitation of this vulnerability allows for unauthorized deletion of engineer-level accounts, leading to mass account deletion.

Reproduction

To reproduce this vulnerability, access the admin directory listing to locate the delete_e.php endpoint. Then, navigate to delete_e.php and modify the id parameter with the IDs of engineer-level accounts to delete them. This can be done without any session or privileges, taking advantage of the missing authentication and authorization checks. Tools like Burp Suite or OWASP ZAP can be used to automate the discovery of vulnerable id parameters.