Sourcecodester · Sourcecodester Simple Online Bidding System · CVE-2024-5428
Name of the Vulnerable Software and Affected Versions:
SourceCodester Simple Online Bidding System version 1.0
Description:
A problematic vulnerability was found in the SourceCodester Simple Online Bidding System, affecting the `save product` function of the file `/admin/index.php?page=manage product` in the HTTP POST Request Handler component. This vulnerability leads to cross-site request forgery and can be launched remotely.
Recommendations:
For version 1.0, consider disabling the `save product` function as a temporary workaround until a patch is available. Restrict access to the `/admin/index.php?page=manage product` endpoint to minimize the risk of exploitation. Avoid using the `save product` function in the affected HTTP POST Request Handler component until the issue is resolved.