PT-2020-20182

Name of the Vulnerable Software and Affected Versions School Management Software PHP/mySQL through 2019-03-14 Description The issue allows an attacker to delete a user via a CSRF attack on the office admin/?action=deleteadmin endpoint. Recommendations For School Management Software PHP/mySQL...