Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-p8pr-5qmg-85fr

Опубликовано: 06 фев. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 5.4

Описание

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

EPSS

Процентиль: 50%
0.00267
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352

Связанные уязвимости

CVSS3: 5.4
nvd
около 1 года назад

A cross-site request forgery (CSRF) vulnerability in the pjActionUpdate function of PHPJabbers Cinema Booking System v2.0 allows remote attackers to escalate privileges by tricking an authenticated admin into submitting an unauthorized request.

EPSS

Процентиль: 50%
0.00267
Низкий

5.4 Medium

CVSS3

Дефекты

CWE-352