Insufficient Granularity of Access Control in GitHub repository fossbilling/fossbilling prior to 0.5.0.
https://huntr.dev/bounties/97ecf4b8-7eeb-4e39-917c-2660262ff9ba
https://github.com/fossbilling/fossbilling/commit/b65a75fcf70feaf547d414672f78d7cbe8a98e7e