| शीर्षक | Script And Tools e-Commerce 3.0 3.0 Cross-Site Request Forgery |
|---|
| विवरण | Title of the Vulnerability:
Script and Tools | eCommerce 3.0 | admin/product-delete.php - CSRF
Vulnerability Class: Cross-Site Request Forgery (CSRF)
Product Name: eCommerce 3.0
Vendor: https:/github.com/scriptandtools/
Vulnerable Product Link: https:/github.com/scriptandtools/eCommerce-website-in-PHP
Technical Details & Description:
The application source code is coded in a way which allows : Cross-Site Request Forgery (CSRF)
Product & product Introduction:
eCommerce-3.0
Observation & Exploitation:
Here,The Vulnerable File Is:
/admin/product-delete.php
Who will be affected of this attack?
->The Admin! Because Hackers will be able to delete the product Data To Make The Chatbot Unavailable!
Those product Data Basically Used For The ChatBot AI of This E-commerce Application!
So,the Chatbot of the website and support system may face Serious Loss To Provide Help And answer the customers and also the product data will not be shown in the website! So they will definitely face a loss!
Thus the admin will lose the Data of products ! |
|---|
| स्रोत | ⚠️ https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_13.html |
|---|
| उपयोगकर्ता | MaloyRoyOrko (UID 79572) |
|---|
| सबमिशन | 14/04/2025 04:05 AM (1 वर्ष पहले) |
|---|
| संयम | 19/04/2025 02:18 AM (5 days later) |
|---|
| स्थिति | प्रतिलिपि |
|---|
| VulDB प्रविष्टि | 304598 [ScriptAndTools eCommerce-website-in-PHP 3.0 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 0 |
|---|