BigProf Online Invoicing System 跨站请求伪造漏洞

BigProf Online Invoicing System OIS is an online invoicing system. A security vulnerability exists in versions prior to BigProf Online Invoicing System 3.0, which stems from the provision of functionality that allows administrators to move member records across groups, and the lack of CSRF...