IDOR

Insecure direct object reference: changing an ID in the URL to open another user's data.

Check whether your site applies it

VulScan Pro checks IDOR automatically and shows the raw evidence.

Run a free audit

Other terms