PT-2024-17181 · Unknown · 1000 Projects Bookstore Management System

Polaris0X1 · Published 2024-11-25 · Updated 2024-12-04 · CVE-2024-11673

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions 1000 Projects Bookstore Management System version 1.0

Description A problematic issue has been found in the system, affecting some unknown processing, which leads to cross-site request forgery. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Recommendations For version 1.0, consider implementing security measures to prevent cross-site request forgery attacks, such as validating user requests and ensuring proper session management, until a patch is available.

Exploit

Fix

Missing Authorization

CSRF

Weakness Enumeration

CWE-862

CWE-352

Related Identifiers

CVE-2024-11673

Affected Products

1000 Projects Bookstore Management System

References · 9

• 🔥 https://github.com/Hacker0xone/CVE/issues/16 · Exploit
• https://osv.dev/vulnerability/CVE-2024-11673 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-11673 · Security Note
• https://vuldb.com/?id.286013 · Note
• https://twitter.com/CVEnew/status/1861186685343556092 · Twitter Post
• https://t.me/cvenotify/103048 · Telegram Post
• https://vuldb.com/?submit.448470 · Note
• https://vuldb.com/?ctiid.286013 · Note
• https://1000projects.org · Note