Описание
PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage.
Ссылки
- ExploitMitigationThird Party Advisory
- Product
Уязвимые конфигурации
Конфигурация 1
cpe:2.3:a:phpgurukul:online_course_registration:3.1:*:*:*:*:*:*:*
EPSS
Процентиль: 3%
0.00016
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-352
Связанные уязвимости
CVSS3: 6.5
github
16 дней назад
PHPgurukul Online Course Registration v3.1 lacks Cross-Site Request Forgery (CSRF) protection on all administrative forms. An attacker can perform unauthorized actions on behalf of authenticated administrators by tricking them into visiting a malicious webpage.
EPSS
Процентиль: 3%
0.00016
Низкий
6.5 Medium
CVSS3
Дефекты
CWE-352