| Titolo | SourceCodester Gym Management System V1.0 Cross-Site Request Forgery |
|---|
| Descrizione | The target system is vulnerable to Cross-Site Request Forgery (CSRF). It does not verify the origin of sensitive requests nor validate CSRF tokens. This allows an attacker to craft malicious web pages that can trigger unwanted actions on behalf of authenticated users, potentially compromising the system's business logic. |
|---|
| Fonte | ⚠️ https://github.com/alc9700jmo/CVE/issues/15 |
|---|
| Utente | alc9700 (UID 79368) |
|---|
| Sottomissione | 19/06/2025 11:13 (1 Anno fa) |
|---|
| Moderazione | 21/06/2025 07:40 (2 days later) |
|---|
| Stato | Accettato |
|---|
| Voce VulDB | 313584 [SourceCodester Gym Management System 1.0 cross site request forgery] |
|---|
| Punti | 18 |
|---|