Security Advisory

CVE-2019-18414

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2019-10-24 17:20:23
Last updated 2024-08-05 01:54:14
Assigner mitre
State PUBLISHED

Description

Sourcecodester Restaurant Management System 1.0 is affected by an admin/staff-exec.php Cross Site Request Forgery vulnerability due to a lack of CSRF protection. This could lead to an attacker tricking the administrator into executing arbitrary code or adding a staff entry via a crafted HTML page.