CVE-2024-57523

medium

Description

Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.

References

https://github.com/HackWidMaddy/CVE-2024-57523.

http://sourcecodester.com

Details

Source: Mitre, NVD

Published: 2025-02-06

Updated: 2025-02-06

Risk Information

CVSS v2

Base Score: 6

Vector: CVSS2#AV:N/AC:M/Au:S/C:P/I:P/A:P

Severity: Medium

CVSS v3

Base Score: 4.5

Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

Severity: Medium