School Attendance Monitoring System 1.0 has CSRF via /user/user/edit.php.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://www.exploit-db.com/exploits/45725/ | exploit vdb entry third party advisory |
http://packetstormsecurity.com/files/150008/School-Attendance-Monitoring-System-1.0-Cross-Site-Request-Forgery.html | exploit vdb entry third party advisory |