CVE-2024-5428: SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery
First published: Tue May 28 2024(Updated: )
A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function save_product of the file /admin/index.php?page=manage_product of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-266383.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Simple Online Bidding System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-5428?
CVE-2024-5428 is classified as a problematic vulnerability impacting SourceCodester Simple Online Bidding System 1.0.
How do I fix CVE-2024-5428?
To fix CVE-2024-5428, update your SourceCodester Simple Online Bidding System to a patched version that addresses the vulnerability.
Which component is affected by CVE-2024-5428?
CVE-2024-5428 affects the HTTP POST Request Handler in the save_product function located in /admin/index.php?page=manage_product.
What impacts can CVE-2024-5428 have on my system?
CVE-2024-5428 may allow an attacker to manipulate data or perform unauthorized actions within the SourceCodester Simple Online Bidding System.
Is SourceCodester Simple Online Bidding System 1.0 the only version affected by CVE-2024-5428?
Yes, CVE-2024-5428 specifically affects version 1.0 of the SourceCodester Simple Online Bidding System.
- agent/weakness
- agent/title
- agent/references
- agent/first-publish-date
- agent/description
- agent/type
- agent/author
- agent/event
- collector/epss-latest
- source/FIRST
- agent/epss
- collector/mitre-cve
- source/MITRE
- agent/severity
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/softwarecombine
- agent/last-modified-date
- agent/tags
- agent/source
- vendor/oretnom23
- canonical/oretnom23 simple online bidding system
- version/oretnom23 simple online bidding system/1.0