Description
A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=delete_user of the component POST Request Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SourceCodester | Best House Rental Management System | 1.0 | — |
References
- VDB-286140 | SourceCodester Best House Rental Management System POST Request ajax.php cross-site request forgery vdb-entry
- VDB-286140 | CTI Indicators (IOB, IOC, IOA) signature permissions-required
- Submit #449697 | sourcecodester Best Courier Management System Project in PHP v1.0 Cross-Site Request Forgery third-party-advisory
- https://github.com/YasserREED/YasserREED-CVEs/blob/main/Best%20house%20rental%20management%20system%20project%20in%20php/Cross-Site%20Request%20Forgery%20(CSRF).md exploit
- https://www.sourcecodester.com/ product