| タイトル | Script And Tools e-Commerce 3.0 3.0 Cross-Site Request Forgery (CSRF) |
|---|
| 説明 | Title of the Vulnerability:
Script and Tools | eCommerce 3.0 | admin/customer-delete.php - CSRF
Vulnerability Class: Cross-Site Request Forgery (CSRF)
Product Name: eCommerce 3.0
Vendor: https://github.com/scriptandtools/
Vulnerable Product Link: https://github.com/scriptandtools/eCommerce-website-in-PHP
Technical Details & Description:
The application source code is coded in a way which allows : Cross-Site Request Forgery (CSRF)
Product & Service Introduction: eCommerce-3.0
Observation & Exploitation:
Here,The Vulnerable File Is:
/admin/subscriber-delete.php
Who will be affected of this attack?
->The Admin! Because Hackers will be able to delete the Subscriber Data List!
Thus the admin will lose the big email list if his subscribers! |
|---|
| ソース | ⚠️ https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_79.html?m=1 |
|---|
| ユーザー | MaloyRoyOrko (UID 79572) |
|---|
| 送信 | 2025年04月04日 15:31 (1 年 ago) |
|---|
| モデレーション | 2025年04月16日 02:49 (11 days later) |
|---|
| ステータス | 重複 |
|---|
| VulDBエントリ | 304598 [ScriptAndTools eCommerce-website-in-PHP 3.0 クロスサイトリクエストフォージェリ] |
|---|
| ポイント | 0 |
|---|