CVE-2022-28992: CSRF

Published May 20, 2022

Updated

A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST request.

Affected Software

1 affected component

Phpgurukul Online Banquet Booking System=1.0

Event History

May 20, 2022

CVE Published

via MITRE·12:53 PM

Data Sourced

via MITRE·12:53 PM

Description

Frequently Asked Questions

What is the severity of CVE-2022-28992?

The severity of CVE-2022-28992 is high with a severity value of 8.8.

What is CVE-2022-28992?

CVE-2022-28992 is a Cross-Site Request Forgery (CSRF) vulnerability in Online Banquet Booking System v1.0.

How does CVE-2022-28992 allow attackers to change admin credentials?

Attackers can change admin credentials by exploiting the CSRF vulnerability in Online Banquet Booking System v1.0 through a crafted POST request.

How can I fix CVE-2022-28992?

To fix CVE-2022-28992, it is recommended to apply the latest patch or update provided by Phpgurukul Online Banquet Booking System.

Where can I find more information about CVE-2022-28992?

You can find more information about CVE-2022-28992 at the following reference: [Online-Banquet-Booking-System-1.0-Cross-Site-Request-Forgery](https://packetstormsecurity.com/files/166587/Online-Banquet-Booking-System-1.0-Cross-Site-Request-Forgery.html)