Training target. This page is intentionally vulnerable.
Keep this deployment private - see README.
LAB hint panel - orders
- A01-04 IDOR on order id
?id=1001 - A01-05 Any user order list
?uid=3 - A02-04 PII in plaintext
?id=1001
Orders
Try ?uid=3 or ?id=1001
| ID | User | Total | Status | Placed | |
|---|---|---|---|---|---|
| 1003 | 2 | $329.00 | paid | 2026-09-28 03:13:42 | view |
| 1002 | 3 | $199.00 | paid | 2026-09-28 03:13:42 | view |
| 1001 | 2 | $168.90 | paid | 2026-09-28 03:13:42 | view |