从该网页截图中，可以获取到以下关于漏洞的关键信息： CVE ID: CVE-2025-65647 Vulnerability Type: Insecure Direct Object Reference (IDOR) Affected System: PHPGURUKUL Online Shopping Portal v2.1 Vulnerable Function: Track Order Function (track-order.php) Impact: - Allows attackers to access order details of other users - Compromise user privacy and confidentiality - Potential misuse for social engineering or further attacks Steps to Reproduce: 1. Register and log in as a legitimate user. 2. Place an order. 3. Manipulate the parameter in the URL to access other user's orders. Mitigation: - Implement proper authorization checks and verify user ownership. - Use indirect object references (e.g., session-based mapping). - Validate user ownership before displaying data. - Implement ACLs and enforce least privilege principles. - Consider using UUIDs or encrypted identifiers instead of sequential order IDs. Discovered by: Sachin P V Vendor: PHPGURUKUL (example link used for reference)