PT-2023-30899 · Sourcecodester · Sourcecodester Contact Manager App
CVSS v3.1
8.8
High
| Vector | AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H |
Name of the Vulnerable Software and Affected Versions
SourceCodester Contact Manager App version 1.0
Description
A problem was found in the SourceCodester Contact Manager App. It affects some unknown functionality of the file update.php. The issue leads to cross-site request forgery. The attack can be launched remotely.
Recommendations
For version 1.0, consider disabling access to the update.php file as a temporary workaround until a patch is available. Restrict access to this file to minimize the risk of exploitation.
Exploit
Fix
CSRF
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Sourcecodester Contact Manager App