Lax authorization security, often found within the business logic of an application, can allow attackers to access other users' data. This occurs in one of seven Web sites.
