Merge pull request #586 from sl33pingmathrapt0r/patch-1

buggy authbypass
digininja · Oct 11, 2023 · 9b787fc · 9b787fc
2 parents c5fcfc1 + 4ae428d
commit 9b787fc
Showing 1 changed file with 1 addition and 0 deletions.
diff --git a/vulnerabilities/authbypass/change_user_details.php b/vulnerabilities/authbypass/change_user_details.php
@@ -10,6 +10,7 @@
 
 if (dvwaSecurityLevelGet() == "impossible" && dvwaCurrentUser() != "admin") {
 	print json_encode (array ("result" => "fail", "error" => "Access denied"));
+	exit;
 }
 
 if ($_SERVER['REQUEST_METHOD'] != "POST") {