提交 #555259: https://github.com/ZHENFENG13/My-BBS My-BBS 1.0 Cross-Site Request Forgery

The My-BBS 1.0 version /updateUserInfo interface does not implement the CSRF protection mechanism. This enables attackers to construct malicious pages and trick login users into executing the modification of user data.

• 来源: ⚠️ https://github.com/caigo8/CVE-md/blob/main/My-bbs/CSRF.md
• 用户: Caigo (UID 81287)
• 提交: 2025-04-09 19時53分 (2 年前)
• 管理: 2025-04-18 16時30分 (9 days later)
• 状态: 已接受
• VulDB条目: 305662 [zhenfeng13 My-BBS 1.0 跨网站请求伪造]
• 积分: 16