cve/2024/CVE-2024-10557.md

CVE-2024-10557

Description

A vulnerability has been found in code-projects Blood Bank Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /file/updateprofile.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

POC

Reference

• https://github.com/bevennyamande/bloodbank_profile_update_csrf

Github

• https://github.com/bevennyamande/CVE-2024-10557
• https://github.com/bevennyamande/bevennyamande.github.io