sbomify Insights

Search by CVE or GitHub advisory id, package name or title.

CVE-2024-5428 SourceCodester Simple Online Bidding System HTTP POST Request save_product cross-site request forgery

Medium 6.9 Published Updated

Attackers can trick authenticated users into modifying product data via CSRF in the Simple Online Bidding System.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2024-5428?

CVE-2024-5428 is a medium-severity vulnerability in SourceCodester Simple Online Bidding System, published on 28 May 2024. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

A vulnerability classified as problematic was found in SourceCodester Simple Online Bidding System 1.0. Affected by this vulnerability is the function save_product of the file /admin/index.php?page=manage_product of the component HTTP POST Request Handler. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-266383.

Weakness: CWE-352

Which versions are affected by CVE-2024-5428?

It affects 1 product.

Products include Oretnom23 Simple Online Bidding System.

How do I fix CVE-2024-5428?

No fix has been published for CVE-2024-5428 yet. Limit exposure of the affected software until one is available.

Is CVE-2024-5428 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-5428 exists.

Sources

Is CVE-2024-5428 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free