| tiêu đề | Sales Tracker Management System has CSRF vulnerability |
|---|
| Mô tả | BUG_Author: Murasaki
URL：http://localhost/php-sts/admin/?page=user/list
Link:https://www.sourcecodester.com/php/16061/sales-tracker-management-system-using-php-free-source-code.html
There is a CSRF vulnerability in the Sales Tracker Management System v1.0.
When the administrator is logged in, open the created JS file to complete the operation of adding an administrator. When the administrator is logged in, open the specified JS file to complete a series of operations that require permissions, such as adding an administrator. |
|---|
| Nguồn | ⚠️ https://github.com/1MurasaKi/STMS_CSRF/blob/main/README.md |
|---|
| Người dùng | Murasaki (UID 41555) |
|---|
| Đệ trình | 23/02/2023 13:10 (cách đây 4 những năm) |
|---|
| Kiểm duyệt | 24/02/2023 08:40 (19 hours later) |
|---|
| Trạng thái | được chấp nhận |
|---|
| Mục VulDB | 221734 [SourceCodester Sales Tracker Management System 1.0 admin/?page=user/list Giả mạo yêu cầu liên trang] |
|---|
| điểm | 20 |
|---|