| عنوان | Script and Tools e-Commerce 3.0 3.0 Cross-Site Request Forgery |
|---|
| الوصف | Title of the Vulnerability:
Script and Tools | eCommerce 3.0 | admin/slider-delete.php - CSRF
Vulnerability Class: Cross-Site Request Forgery (CSRF)
Product Name: eCommerce 3.0
Vendor: https:/github.com/scriptandtools/
Vulnerable Product Link: https:/github.com/scriptandtools/eCommerce-website-in-PHP
Technical Details & Description:
The application source code is coded in a way which allows : Cross-Site Request Forgery (CSRF)
Product & slider Introduction:
eCommerce-3.0
Observation & Exploitation:
Vulnerable File Is:
/admin/slider-delete.php
Who will be affected of this attack?
->The Admin! Because Hackers will be able to delete the slider Data To Make The Chatbot Unavailable!
Those slider Data Basically Used For The ChatBot AI of This E-commerce Application!
So,the Chatbot of the website and support system Team may face Serious Loss To Provide Help And answer the customers!
Thus the admin will lose the Data of sliders ! |
|---|
| المصدر | ⚠️ https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_73.html |
|---|
| المستخدم | MaloyRoyOrko (UID 79572) |
|---|
| ارسال | 10/04/2025 07:03 AM (1 سنة منذ) |
|---|
| الاعتدال | 19/04/2025 01:52 AM (9 days later) |
|---|
| الحالة | مكرر |
|---|
| إدخال VulDB | 304598 [ScriptAndTools eCommerce-website-in-PHP 3.0 تزوير طلبات عبر المواقع] |
|---|
| النقاط | 0 |
|---|