PT-2026-43216 · Undefined · Undefined

Published 2026-05-25 · Updated 2026-05-25 · CVE-2018-25363

NVD

CVSS v3.1

4.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Twitter-Clone 1 contains a cross-site request forgery vulnerability that allows remote attackers to force victims to delete posts by crafting malicious HTML forms. Attackers can create hidden forms targeting tweetdel.php with tweet IDs and automatically submit them to delete arbitrary posts from authenticated user sessions.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2018-25363

Affected Products

Undefined

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2018-25363 · Security Note
• https://exploit-db.com/exploits/45232 · Note
• https://github.com/Fyffe/PHP-Twitter-Clone · Note
• https://vulncheck.com/advisories/twitter-clone-1-cross-site-request-forgery-via-tweetdel-php · Note