CVE-2021-37381: Cross-Site Request Forgery (CSRF)

Southsoft GMIS 5.0 is vulnerable to CSRF attacks. Attackers can access other users' private information such as photos through CSRF. For example: any student's photo information can be accessed through /gmis/S1/student/grgl/PotoImageShow/?bh=2. Among them, the code in 1 is a random string generat...

PT-2021-21627

Name of the Vulnerable Software and Affected Versions Southsoft GMIS version 5.0 Description The issue allows attackers to access other users' private information, such as photos, through CSRF attacks. For example, any student's photo information can be accessed through the...