cve/2023/CVE-2023-25707.md
2024-05-25 21:48:12 +02:00

19 lines
710 B
Markdown
Raw Blame History

This file contains invisible Unicode characters

This file contains invisible Unicode characters that are indistinguishable to humans but may be processed differently by a computer. If you think that this is intentional, you can safely ignore this warning. Use the Escape button to reveal them.

### [CVE-2023-25707](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-25707)
![](https://img.shields.io/static/v1?label=Product&message=VikBooking%20Hotel%20Booking%20Engine%20%26%20PMS&color=blue)
![](https://img.shields.io/static/v1?label=Version&message=n%2Fa&color=blue)
![](https://img.shields.io/static/v1?label=Vulnerability&message=CWE-352%20Cross-Site%20Request%20Forgery%20(CSRF)&color=brighgreen)
### Description
Cross-Site Request Forgery (CSRF) vulnerability in E4J s.R.L. VikBooking Hotel Booking Engine & PMS plugin <= 1.5.12 versions.
### POC
#### Reference
No PoCs from references.
#### Github
- https://github.com/ARPSyndicate/cvemon
- https://github.com/yaudahbanh/CVE-Archive