| Title | SourceCodester Gym Management System V1.0 Cross-Site Request Forgery |
|---|
| Description | The target system is vulnerable to Cross-Site Request Forgery (CSRF). It does not verify the origin of sensitive requests nor validate CSRF tokens. This allows an attacker to craft malicious web pages that can trigger unwanted actions on behalf of authenticated users, potentially compromising the system's business logic. |
|---|
| Source | ⚠️ https://github.com/alc9700jmo/CVE/issues/15 |
|---|
| User | alc9700 (UID 79368) |
|---|
| Submission | 06/19/2025 11:13 (1 Year ago) |
|---|
| Moderation | 06/21/2025 07:40 (2 days later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 313584 [SourceCodester Gym Management System 1.0 cross-site request forgery] |
|---|
| Points | 18 |
|---|