Forced Browsing

An attack where a user manually accesses web pages not linked from the application, potentially finding unprotected administrative functions.