| शीर्षक | Script and Tools e-Commerce 3.0 3.0 Cross-Site Request Forgery |
|---|
| विवरण | Title of the Vulnerability:
Script and Tools | eCommerce 3.0 | admin/faq-delete.php - CSRF
Vulnerability Class: Cross-Site Request Forgery (CSRF)
Product Name: eCommerce 3.0
Vendor: https:/github.com/scriptandtools/
Vulnerable Product Link: https:/github.com/scriptandtools/eCommerce-website-in-PHP
Technical Details & Description:
The application source code is coded in a way which allows : Cross-Site Request Forgery (CSRF)
Product & Service Introduction: eCommerce-3.0
Observation & Exploitation:
Here,The Vulnerable File Is:
/admin/faq-delete.php
Who will be affected of this attack?
->The Admin! Because Hackers will be able to delete the Faq Data To Make The Chatbot Unavailable!
Those Faq Data Basically Used For The ChatBot AI of This E-commerce Application!
So,the Chatbot of the website and support system may face Serious Loss To Provide Help And answer the customers!
Thus the admin will lose the Data of Faqs !
|
|---|
| स्रोत | ⚠️ https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30-adminfaq.html |
|---|
| उपयोगकर्ता | MaloyRoyOrko (UID 79572) |
|---|
| सबमिशन | 10/04/2025 06:41 AM (1 वर्ष पहले) |
|---|
| संयम | 19/04/2025 01:52 AM (9 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 304598 [ScriptAndTools eCommerce-website-in-PHP 3.0 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 0 |
|---|