| عنوان | https://gitee.com/technical-laohu/mpay mpay v1.2.4 Cross-Site Request Forgery |
|---|
| الوصف | The deletion function of the account management of the mpay system in the latest version of v1.2.4 has a CSRF vulnerability，CSRF attacks can exploit the login status of users to perform malicious operations without the user's knowledge, resulting in serious consequences such as user information leakage, account tampering, or sensitive operations being accidentally triggered. |
|---|
| المصدر | ⚠️ https://github.com/bdkuzma/vuln/issues/18 |
|---|
| المستخدم | baihekuz (UID 84516) |
|---|
| ارسال | 10/01/2026 05:31 AM (9 أشهر منذ) |
|---|
| الاعتدال | 18/01/2026 03:00 PM (8 days later) |
|---|
| الحالة | تمت الموافقة |
|---|
| إدخال VulDB | 341746 [technical-laohu mpay حتى 1.2.4 تزوير طلبات عبر المواقع] |
|---|
| النقاط | 20 |
|---|