In ProjectWorlds Online Book Store PHP 1.0 a CSRF vulnerability in admin_delete.php allows a remote attacker to delete any book.

Published Dec 22, 2021 · Updated Aug 4, 2024 · Assigned by mitre