PT-2025-45478 · Sourcecodester · Leads Manager Tool

Published 2025-11-07 · Updated 2025-11-08 · CVE-2025-63716

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Leads Manager Tool version 1.0

Description The application is susceptible to Cross-Site Request Forgery (CSRF) attacks, enabling unauthorized modification of application state. The application does not implement CSRF protection mechanisms, such as anti-CSRF tokens or same-origin verification, for critical endpoints. This allows an attacker to potentially perform actions on behalf of an authenticated user without their knowledge.

Recommendations Implement CSRF protection mechanisms, such as anti-CSRF tokens or same-origin verification, for all critical endpoints.

Exploit

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2025-63716

Affected Products

Leads Manager Tool

References · 7

• 🔥 https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63716/README5.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-63716 · Security Note
• https://osv.dev/vulnerability/CVE-2025-63716 · Vendor Advisory
• https://t.me/CVEtracker/36786 · Telegram Post
• https://twitter.com/CVEnew/status/1986861776848212324 · Twitter Post
• https://twitter.com/VulmonFeeds/status/1986961817881424348 · Twitter Post
• https://sourcecodester.com/php/17510/leads-manager-tool-using-php-and-mysql-source-code.html · Note