Horizontal Privilege Escalation

• Modify the "id" parameter to access a different account: https://insecure-website.com/myaccount?id=123 (opens in a new tab)

• This attack can be used to go from horizontal to vertical by taking over a privileged account