CVE-2024-57523

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2024-57523
Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.

4.5 /10

CVSS v3 : MEDIUM

V3 Legend

Vector :

Exploitability : 0.9 / Impact : 3.6

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction REQUIRED

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
http://sourcecodester.com Product
https://github.com/HackWidMaddy/CVE-2024-57523. Exploit Third Party Advisory
https://github.com/HackWidMaddy/CVE-2024-57523. Exploit Third Party Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:oretnom23:packers_and_movers_management_system:1.0:*:*:*:*:*:*:*
History

No history.

Information

Published : 2025-02-06 19:15

Updated : 2025-04-22 20:06

NVD link : CVE-2024-57523

Mitre link : CVE-2024-57523

CVE.ORG link : CVE-2024-57523

JSON object : View

Products Affected

oretnom23

  • packers_and_movers_management_system
CWE
CWE-352

Cross-Site Request Forgery (CSRF)