| शीर्षक | Script And Tools e-Commerce 3.0 3.0 Cross-Site Request Forgery (CSRF) |
|---|
| विवरण | Title of the Vulnerability:
Script and Tools | eCommerce 3.0 | admin/order-delete.php - CSRF
Vulnerability Class: Cross-Site Request Forgery (CSRF)
Product Name: eCommerce 3.0
Vendor: https:/github.com/scriptandtools/
Vulnerable Product Link:
https:/github.com/scriptandtools/eCommerce-website-in-PHP
Technical Details & Description:
The application source code is coded in a way which allows : Cross-Site Request Forgery (CSRF)
Product & order Introduction:
eCommerce-3.0
Observation & Exploitation:
Vulnerable File Is:
/admin/order-delete.php
Who will be affected of this attack?
->The Admin! Because Hackers will be able to delete the order Data To Make The Order Delivery To All Information Unavailable!
Thus the admin will lose the Data of orders and unable to locate and process the order even the user can file case on the Admin! |
|---|
| स्रोत | ⚠️ https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_49.html |
|---|
| उपयोगकर्ता | MaloyRoyOrko (UID 79572) |
|---|
| सबमिशन | 12/04/2025 02:43 PM (1 वर्ष पहले) |
|---|
| संयम | 19/04/2025 02:18 AM (6 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 304598 [ScriptAndTools eCommerce-website-in-PHP 3.0 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 0 |
|---|