| शीर्षक | SourceCodester Diary App 1.0 Cross Site Request Forgery |
|---|
| विवरण | A Cross-Site Request Forgery (CSRF) vulnerability exists in the SourceCodester Diary App in diary.php.
The application performs a state-changing action via the GET parameter `delete` without implementing CSRF protection.
An attacker can craft a malicious webpage that triggers the following request when visited by an authenticated user:
/diary_app/diary-app/diary.php?delete=<id>
This allows attackers to delete diary entries without the user's consent. |
|---|
| स्रोत | ⚠️ https://gist.github.com/Mohdanass/50a525ba0a72e10fda85f0db11eeed92 |
|---|
| उपयोगकर्ता | Anas22335 (UID 96357) |
|---|
| सबमिशन | 11/03/2026 04:42 PM (7 महीनों पहले) |
|---|
| संयम | 27/03/2026 09:49 AM (16 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 353855 [SourceCodester Diary App 1.0 diary.php क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|