The Tubigan "Welcome to our Resort" 1.0 software allows CSRF via admin/mod_users/controller.php?action=edit.
The web application does not, or cannot, sufficiently verify whether a request was intentionally provided by the user who sent the request, which could have originated from an unauthorized actor.
Link | Tags |
---|---|
https://www.exploit-db.com/author/?a=8844 | third party advisory vdb entry exploit |
https://www.exploit-db.com/exploits/45718 | third party advisory vdb entry exploit |