| शीर्षक | PHPEMS <=11.0 Cross-Site Request Forgery |
|---|
| विवरण | PHPEMS version <=11.0 is affected by a Cross-Site Request Forgery (CSRF) vulnerability. An attacker can craft a malicious web page and trick an authenticated PHPEMS administrator or user into visiting it. Without additional user interaction, this allows the attacker to execute unintended sensitive actions (e.g., modifying system configurations, submitting malicious data), leading to unauthorized system state tampering or privilege escalation. This vulnerability occurs because the application does not implement CSRF protection mechanisms (such as CSRF tokens) for critical requests. |
|---|
| स्रोत | ⚠️ https://byebydoggy.github.io/post/2025/1231-phpems-csrf-poc/ |
|---|
| उपयोगकर्ता | byebyedoggy (UID 90091) |
|---|
| सबमिशन | 31/12/2025 03:33 PM (10 महीनों पहले) |
|---|
| संयम | 01/01/2026 09:43 AM (18 hours later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 339325 [PHPEMS तक 11.0 क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|