PT-2024-15547 · Codeastro · Codeastro Simple Banking System

Name of the Vulnerable Software and Affected Versions: CodeAstro Simple Banking System version 1.0 Description: A problematic vulnerability has been found in the CodeAstro Simple Banking System, affecting an unknown part of the file createuser.php of the component Create a User Page. The...

CVE-2022-30280

/SecurityManagement/html/createuser.jsf in Nokia NetAct 22 allows CSRF. A remote attacker is able to create users with arbitrary privileges, even administrative privileges. The application even if it implements a CSRF token for the random GET request does not ever verify a CSRF token. With a litt...