< Back ~ Labs ~ 1. Unprotected admin functionality ~ 2. Unprotected admin functionality with unpredictable URL ~ 3. User role controlled by request parameter ~ 4. User ID controlled by request parameter, with unpredictable user IDs ~ 5. User ID controlled by request parameter with password disclosure