| tiêu đề | SourceCodester Pet grooming management software 1.0 Cross-Site Request Forgery |
|---|
| Mô tả | The Sourcecodester Pet Grooming Management Software is vulnerable to Cross-Site Request Forgery (CSRF) due to missing anti-CSRF protections on the all the endpoints.
In this scenario, we basically test the CSRF exploitation on user deletion functionality in the admin panel.
The application processes sensitive administrative actions using only session-based authentication and does not implement CSRF tokens, Origin validation, or Referer header checks. An attacker can craft a malicious HTML page that silently submits a forged POST request when visited by an authenticated administrator.
As a result, arbitrary user accounts can be deleted without the administrator’s knowledge or consent, leading to data loss and service disruption. |
|---|
| Nguồn | ⚠️ https://github.com/Asim-QAZi/CSRF-in-Pet-Grooming-Management-Software |
|---|
| Người dùng | moasim (UID 93970) |
|---|
| Đệ trình | 19/01/2026 20:48 (cách đây 9 các tháng) |
|---|
| Kiểm duyệt | 30/01/2026 11:52 (11 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 326088 [SourceCodester Pet Grooming Management Software 1.0 Giả mạo yêu cầu liên trang] |
|---|
| điểm | 0 |
|---|