CVE-2025-63712 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to de…
High CVSS: 8.8

CVE-2025-63712

Cross-Site Request Forgery (CSRF) in SourceCodester Product Expiry Management System. The User Management module (delete-user.php) allows remote attackers to delete arbitrary user accounts via forged cross-origin GET requests because the endpoint relies solely on session cookies and lacks CSRF protection.
Vendor
Senior-walter
Product
Web-based Pharmacy Product Management System
CWE
CWE-352
Yayın Tarihi
2025-11-10 15:15:38
Güncelleme
2025-11-18 17:16:12
Source Identifier
cve@mitre.org
KEV Date Added
-

Kategoriler

CWE-352 Web-based Pharmacy Product Management System HIGH Senior-walter 2025

Referanslar

https://github.com/floccocam-cpu/CVE-Research-2025/blob/main/CVE-2025-63712/README4.md https://www.sourcecodester.com/php/17883/web-based-product-alert-system.html