CVEvulnerability

CVE-2024-57523

4.5 MEDIUM Published 2025-02-06 Modified 2026-07-05 Official page ↗
Status
Modified
Published
2025-02-06
Last modified
2026-07-05
Assigner
[email protected]
CVSS 3.1 (134c704f-9b21-4f2e-91b3-4a467353bcc0)
4.5 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N
Weaknesses
CWE-352

Description

Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.

Affected configurations

• oretnom23 packers and movers management system 1.0

Related

Weakness · CWE (1)

  • CWE-352 Cross-Site Request Forgery weakness

References