CVE-2024-11743
SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery
A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=delete_user of the component POST Request Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Es wurde eine Schwachstelle in SourceCodester Best House Rental Management System 1.0 gefunden. Sie wurde als problematisch eingestuft. Es betrifft eine unbekannte Funktion der Datei /rental/ajax.php?action=delete_user der Komponente POST Request Handler. Durch Manipulieren mit unbekannten Daten kann eine cross-site request forgery-Schwachstelle ausgenutzt werden. Der Angriff kann über das Netzwerk erfolgen. Der Exploit steht zur öffentlichen Verfügung.
| 2024-11-26: | Advisory disclosed |
| 2024-11-26: | VulDB entry created |
| 2024-11-28: | VulDB entry last update |
Yasser Alshammari
YasserREED (VulDB User)
vuldb.com/?id.286140 (VDB-286140 | SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery)
vuldb.com/?ctiid.286140 (VDB-286140 | CTI Indicators (IOB, IOC, IOA))
vuldb.com/?submit.449697 (Submit #449697 | sourcecodester Best Courier Management System Project in PHP v1.0 Cross-Site Request Forgery)
github.com/...ct in php/Cross-Site Request Forgery (CSRF).md
www.sourcecodester.com/
Support options
