PT-2019-19743 · Php Scripts Mall · Php Scripts Mall Online Lottery Php Readymade Script

Aniket Dinda · Publicado 2019-03-29 · Atualizado 2019-04-01 · CVE-2019-9604

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0

Description The issue concerns a Cross-Site Request Forgery (CSRF) flaw related to Edit Profile actions.

Recommendations For PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0, consider implementing proper CSRF token validation for the Edit Profile action to prevent unauthorized changes.

Exploit

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2019-9604

Produtos afetados

Php Scripts Mall Online Lottery Php Readymade Script

Referências · 3

• 🔥 https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-cross-site-request-forgery-csrf-for-edit-profile-actionscve-2019-9604 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9604 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-9604 · Aviso do Fabricante