| عنوان | Mindskip xzs-mysql 3.9.0 Cross-Site Request Forgery |
|---|
| الوصف | Mindskip xzs-mysql 3.9.0 lacks cross-site request forgery (CSRF) protection throughout the application. This allows an attacker to trick an authenticated user into performing arbitrary state modification requests, such as submitting exam answers without the user's consent. The lack of CSRF tokens in requests leaves the application highly susceptible to exploitation. |
|---|
| المصدر | ⚠️ https://github.com/cydtseng/Vulnerability-Research/blob/main/xzs-mysql/CrossSiteRequestForgery-Multiple.md |
|---|
| المستخدم | vastzero (UID 78767) |
|---|
| ارسال | 26/01/2025 10:51 AM (2 سنوات منذ) |
|---|
| الاعتدال | 06/02/2025 03:26 PM (11 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 294860 [Mindskip xzs-mysql 学之思开源考试系统 3.9.0 تزوير طلبات عبر المواقع] |
|---|
| النقاط | 18 |
|---|