Cross-Site Request Forgery in Hotel Management System by an Unknown Vendor
CVE-2024-42555

8.8HIGH

Key Information:

Vendor

Unknown Vendor

Status
Hotel Management System
Vendor
CVE Published:
20 August 2024

What is CVE-2024-42555?

The Hotel Management System contains a vulnerability within the admin_room_removed.php component, where a Cross-Site Request Forgery (CSRF) allows unauthorized users to escalate privileges. This exploit enables attackers to perform actions on behalf of authenticated users without their consent, potentially compromising sensitive information and administrative access.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://gist.github.com/topsky979/afd445b90e13a27a6422cea...

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.