Dashboard Vulnerability Assessment

I need a focused vulnerability assessment on my site’s user dashboard. The sole target is the authenticated area that houses our user profiles, transaction history, and confidential documents—nothing else is in scope right now. I’m counting on you to probe this section as an attacker would, uncover every weakness, and explain the real-world risk in terms my developers can act on.

Scope & approach
• Assess only the user dashboard; public pages and the payment gateway are off-limits for this round.
• Combine automated scanning with manual verification, following recognised frameworks such as OWASP Top 10 and CVSS for severity scoring.
• Testing must be non-destructive and avoid service disruption on the live environment.

Deliverables
1. Comprehensive report detailing each vulnerability, its CVSS-based severity, proof-of-concept steps, and clear remediation guidance.
2. Executive summary suitable for non-technical stakeholders.
3. Supporting artefacts (logs, screenshots, scripts) that validate your findings.

Acceptance criteria
• Every weakness affecting user profiles, transaction history, or confidential documents is documented.
• No production data is altered or lost.
• Final report delivered in both PDF and editable format within the agreed timeline.

Tell me briefly how you’ll tackle the assessment and highlight any similar work you’ve completed—then let’s secure this dashboard.