Cross-Site Request Forgery in Hotel Management System by an Unknown Vendor
CVE-2024-42555

Currently unrated

Key Information:

Vendor

Unknown Vendor

Status
Hotel Management System
Vendor
CVE Published:
20 August 2024

What is CVE-2024-42555?

The Hotel Management System contains a vulnerability within the admin_room_removed.php component, where a Cross-Site Request Forgery (CSRF) allows unauthorized users to escalate privileges. This exploit enables attackers to perform actions on behalf of authenticated users without their consent, potentially compromising sensitive information and administrative access.

References

https://gist.github.com/topsky979/afd445b90e13a27a6422cea...

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.