PT-2019-15308

Name of the Vulnerable Software and Affected Versions Sourcecodester Online Grading System version 1.0 Description The issue is related to a lack of CSRF protection, which could allow an attacker to trick the administrator into executing arbitrary code via a crafted HTML page. This can be...

CVE-2019-18280: Cross-Site Request Forgery (CSRF)

Sourcecodester Online Grading System 1.0 is affected by a Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code via a crafted HTML page, as demonstrated by a Create User action at the...