Freshbooks Security is Weak!

Posted by JamesWilson on Sun, 09/14/2008 - 06:57
Watch in this screencast where I show how easy it is to get escalation of privileges on Freshbooks.
I log in as a client who has received an invoice (bill), and I proceed to delete that bill, even though I should not have that ability.