SourceCodester 最佳房屋租赁管理系统 POST 请求 ajax.php 跨站请求伪造 (CVE-2024-11743)
CVE编号
CVE-2024-11743
利用情况
暂无
补丁情况
N/A
披露时间
2024-11-27
漏洞描述
A vulnerability, which was classified as problematic, was found in SourceCodester Best House Rental Management System 1.0. Affected is an unknown function of the file /rental/ajax.php?action=delete_user of the component POST Request Handler. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.
解决建议
建议您更新当前系统或软件至最新版,完成漏洞的修复。
文章评论