Code-Projects Online Shoe Store Improper Access Control Vulnerability

A critical vulnerability has been identified in Code-Projects Online Shoe Store version 1.0, specifically within the file '/admin/index.php'. This vulnerability arises from broken access controls, allowing any user, including those unauthenticated, to gain administrative privileges and access the admin panel. The issue can be exploited remotely without any authentication.

Impact

Exploitation of this vulnerability allows unauthorized users to gain admin rights and access the administrative panel.

Reproduction

To reproduce this vulnerability, log in as a normal user and navigate to '/admin/index.php'. This action will grant admin privileges, allowing access to the admin panel.