| tiêu đề | Fabian Ros Simple E-Banking System In PHP With Source Code October 11, 2025 Cross-Site Request Forgery |
|---|
| Mô tả | A Cross-Site Request Forgery (CSRF) vulnerability exists in the Simple E-Banking System by Fabian Ros (version uploaded on October 11, 2025, and potentially earlier versions). The application's withdrawal function, handled by the `/minus.php` script, lacks validation mechanisms like Anti-CSRF tokens. This flaw allows a remote attacker to force an authenticated user to perform unauthorized financial transactions, resulting in arbitrary amounts being withdrawn from the victim's account without their consent. The vulnerability leads to a direct loss of funds. |
|---|
| Nguồn | ⚠️ https://github.com/i4G5d/CRITICAL-SECURITY-VULNERABILITY-REPORT-CSRF-Forced-Withdrawal |
|---|
| Người dùng | i4g5d (UID 92060) |
|---|
| Đệ trình | 27/10/2025 15:56 (cách đây 12 các tháng) |
|---|
| Kiểm duyệt | 13/11/2025 09:52 (17 days later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 332324 [Fabian Ros/SourceCodester Simple E-Banking System 1.0 Giả mạo yêu cầu liên trang] |
|---|
| điểm | 20 |
|---|