CVE-2024-5428: SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery
A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function saveproduct of the file /admin/index.php?page=manageproduct of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-266383.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2024-5428?
CVE-2024-5428 is classified as a problematic vulnerability impacting SourceCodester Simple Online Bidding System 1.0.
How do I fix CVE-2024-5428?
To fix CVE-2024-5428, update your SourceCodester Simple Online Bidding System to a patched version that addresses the vulnerability.
Which component is affected by CVE-2024-5428?
CVE-2024-5428 affects the HTTP POST Request Handler in the save_product function located in /admin/index.php?page=manage_product.
What impacts can CVE-2024-5428 have on my system?
CVE-2024-5428 may allow an attacker to manipulate data or perform unauthorized actions within the SourceCodester Simple Online Bidding System.
Is SourceCodester Simple Online Bidding System 1.0 the only version affected by CVE-2024-5428?
Yes, CVE-2024-5428 specifically affects version 1.0 of the SourceCodester Simple Online Bidding System.