| शीर्षक | ajayrandhawa/User-Management-PHP-MYSQL web 1 Cross-Site Request Forgery |
|---|
| विवरण | This project has a CSRF vulnerability. After downloading the project and successfully deploying it locally, log in to the administrator account.
The operations of deleting users and changing user status are executed via GET requests, with no CSRF protection measures in place. Attackers can trick administrators into clicking malicious links to delete any user or modify the status of any user. |
|---|
| स्रोत | ⚠️ https://github.com/Lianhaorui/Report/blob/main/CSRF-10.11.7z |
|---|
| उपयोगकर्ता | lianhaorui (UID 91045) |
|---|
| सबमिशन | 11/10/2025 03:37 PM (1 वर्ष पहले) |
|---|
| संयम | 25/10/2025 08:25 AM (14 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 329872 [ajayrandhawa User-Management-PHP-MYSQL web तक fedcf58797bf2791591606f7b61fdad99ad8bff1 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 19 |
|---|