Описание
A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function save_product of the file /admin/index.php?page=manage_product of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-266383.
Ссылки
- Exploit
- Permissions RequiredVDB Entry
- Permissions RequiredVDB Entry
- Third Party AdvisoryVDB Entry
- Exploit
- Permissions RequiredVDB Entry
- Permissions RequiredVDB Entry
- Third Party AdvisoryVDB Entry
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:oretnom23:simple_online_bidding_system:1.0:*:*:*:*:*:*:*
EPSS
Процентиль: 30%
0.00113
Низкий
4.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-352
EPSS
Процентиль: 30%
0.00113
Низкий
4.3 Medium
CVSS3
5 Medium
CVSS2
Дефекты
CWE-352