05 - User ID controlled by request parameter

#accesscontrol #idor #portswigger #writeup

https://0a740082042c7b8e86f8431b0034002e.web-security-academy.net/my-account?id=administrator

https://0a740082042c7b8e86f8431b0034002e.web-security-academy.net/my-account?id=carlos