| शीर्षक | Online Pizza Ordering System has CSRF vulnerability |
|---|
| विवरण | BUG_Author: Murasaki
URL：http://localhost/php-opos/admin/ajax.php?action=save_user
Link:https://www.sourcecodester.com/php/16166/online-pizza-ordering-system-php-free-source-code.html
There is a CSRF vulnerability in the Online Pizza Ordering System v1.0.
When the administrator is logged in, open the created JS script file to complete the operation of adding an administrator.When the administrator is logged in, open the specified JS script file to complete a series of operations that require permissions, such as adding an administrator.
The CSRF vulnerability can complete various permission operations in the background when combined with the stored XSS vulnerability, which seriously affects business processes and permission management. |
|---|
| स्रोत | ⚠️ https://github.com/1MurasaKi/PizzaCSRF_report/tree/main/vender/Online%20Pizza%20Ordering%20System |
|---|
| उपयोगकर्ता | Murasaki (UID 41555) |
|---|
| सबमिशन | 22/02/2023 02:49 AM (4 साल पहले) |
|---|
| संयम | 23/02/2023 04:20 PM (2 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 221681 [SourceCodester Online Pizza Ordering System 1.0 ajax.php?action=save_user क्रॉस साइट रिक्वेस्ट फॉर्जरी] |
|---|
| अंक | 20 |
|---|