Shop / VS-007
IDOR Keychain
$5.99
In stock — ships when you least expect it
Access any order with this key
Use admin / admin123, or any account from the back office.
Lab note: product ids are sequential and unguarded, so
/product/1 through /product/12 all resolve.
Order receipts behave the same way — see /api/orders/1.