SourceCodester Best Employee Management System Authorization Bypass Vulnerability

An authorization bypass vulnerability has been identified in SourceCodester Best Employee Management System version 1.0. The issue arises in the file /admin/salary_slip.php, where improper handling of the 'id' argument allows for unauthorized access. This vulnerability can be exploited remotely.

Impact

Exploitation of this vulnerability allows for unauthorized access to the salary slip management functionality, potentially leading to unauthorized viewing or manipulation of salary data.

Reproduction

To reproduce this vulnerability, send a POST request to /admin/salary_slip.php with the 'id' parameter set to a valid value. This request can be made using a tool like Postman or through a simple script that automates the process.