| 标题 | SourceCodester Stock Management System (SMS-PHP by oretnom23) 1.0 Cross-Site Request Forgery |
|---|
| 描述 | A Cross-Site Request Forgery (CSRF) vulnerability has been identified in the admin panel of Stock Management System (SMS-PHP by oretnom23), specifically on the user's creation page. An attacker can exploit this vulnerability to create a new administrator account with full privileges by submitting a specially crafted request to the vulnerable endpoint. |
|---|
| 来源 | ⚠️ https://github.com/th3w0lf-1337/Vulnerabilities/blob/main/SMS-PHP/CSRF/info.md |
|---|
| 用户 | Th3W0lf (UID 84351) |
|---|
| 提交 | 2025-04-21 18時50分 (1 年前) |
|---|
| 管理 | 2025-05-05 13時32分 (14 days later) |
|---|
| 状态 | 已接受 |
|---|
| VulDB条目 | 307390 [SourceCodester/oretnom23 Stock Management System 1.0 Users.php?f=save 跨网站请求伪造] |
|---|
| 积分 | 18 |
|---|