Cross-Site Request Forgery Vulnerability in E-Commerce-PHP by Kurniaramadhan
CVE-2024-13203

6.9MEDIUM

Key Information:

Vendor

Kurniaramadhan

Status
E-commerce-PHP
Vendor
CVE Published:
9 January 2025

What is CVE-2024-13203?

A significant security vulnerability has been identified in E-Commerce-PHP version 1.0 by Kurniaramadhan, allowing remote attackers to exploit an unknown function through cross-site request forgery (CSRF) tactics. This manipulation can potentially lead to unauthorized actions being performed on behalf of users without their knowledge or consent. Despite attempts to inform the vendor about the issue, there has been no acknowledgment or remediation, emphasizing the urgency for users to assess the security of their implementations and consider applying necessary safeguards.

Affected Version(s)

E-Commerce-PHP 1.0

References

https://vuldb.com/?id.290796
vdb-entry
https://vuldb.com/?ctiid.290796
signaturepermissions-required
https://www.websecurityinsights.my.id/2024/12/ecommerce-p...
related

CVSS V4

Score:
6.9
Severity:
MEDIUM
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.
CVE-2024-13203 : Cross-Site Request Forgery Vulnerability in E-Commerce-PHP by Kurniaramadhan