Cross site request forgery (csrf)

2024-01-3001:15:00

PRIOn knowledge base

www.prio-n.com

cross site request forgery

csrf

remote code execution

staff_list parameter

nvd

inventory management system

8.3 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.9%

JSON

Cross Site Request Forgery (CSRF) vulnerability in Free Open-Source Inventory Management System v.1.0 allows a remote attacker to execute arbitrary code via the staff_list parameter in the index.php component.

CPENameOperatorVersion
free_and_open_source_inventory_management_systemeq1.0

CPE	Name	Operator	Version
	free_and_open_source_inventory_management_system	eq	1.0

References

github.com/xxxxfang/CVE-Apply/blob/main/csrf-1.md