Vulnerability · Published Aug 1, 2024 · Assigned by VulDB
CVE-2024-7360SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery
Medium 4.3
In plain English
A medium-severity cross-site request forgery in Tracking Monitoring Management System from SourceCodester. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 31% of all known vulnerabilities).
Official description
A vulnerability classified as problematic has been found in SourceCodester Tracking Monitoring Management System 1.0. This affects an unknown part of the file /ajax.php. The manipulation leads to cross-site request forgery. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-273339.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SourceCodester | Tracking Monitoring Management System | 1.0 |
Weakness: CWE-352 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
References
- VDB-273339 | SourceCodester Tracking Monitoring Management System ajax.php cross-site request forgery vdb-entry
- VDB-273339 | CTI Indicators (IOB, IOC, IOA) signature, permissions-required
- Submit #383495 | SourceCodester Tracking/Monitoring Management System 1.0 Cross-Site Request Forgery third-party-advisory
- https://gist.github.com/topsky979/ac97a335ed9fcf4eefe3c952928a6d0e exploit