PT-2019-19743 · Php Scripts Mall · Php Scripts Mall Online Lottery Php Readymade Script

Aniket Dinda · Published 2019-03-29 · Updated 2019-04-01 · CVE-2019-9604

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0

Description The issue concerns a Cross-Site Request Forgery (CSRF) flaw related to Edit Profile actions.

Recommendations For PHP Scripts Mall Online Lottery PHP Readymade Script version 1.7.0, consider implementing proper CSRF token validation for the Edit Profile action to prevent unauthorized changes.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2019-9604

Affected Products

Php Scripts Mall Online Lottery Php Readymade Script

References · 3

• 🔥 https://hackingvila.wordpress.com/2019/03/06/php-scripts-mall-online-lottery-php-readymade-script-1-7-0-has-cross-site-request-forgery-csrf-for-edit-profile-actionscve-2019-9604 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-9604 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9604 · Vendor Advisory