CVE-2024-7360: SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery
First published: Thu Aug 01 2024(Updated: )
A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring Management System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273339.
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Oretnom23 Tracking Monitoring Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-7360?
CVE-2024-7360 is classified as problematic due to its potential for cross-site request forgery.
How do I fix CVE-2024-7360?
To fix CVE-2024-7360, ensure that appropriate CSRF tokens are implemented in forms and API endpoints.
What systems are affected by CVE-2024-7360?
CVE-2024-7360 affects SourceCodester Tracking Monitoring Management System version 1.0.
Can CVE-2024-7360 be exploited remotely?
Yes, CVE-2024-7360 can be exploited remotely, allowing attackers to initiate cross-site request forgery attacks.
What file is involved in CVE-2024-7360?
The vulnerability CVE-2024-7360 involves the /ajax.php file in the affected software.
- agent/weakness
- agent/title
- agent/references
- agent/type
- agent/description
- agent/first-publish-date
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- agent/softwarecombine
- agent/tags
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- vendor/oretnom23
- canonical/oretnom23 tracking monitoring management system
- version/oretnom23 tracking monitoring management system/1.0