CVE-2024-57523

38th percentile - higher than 38% of all known CVEs

In SourceCodester Packers and Movers Management System 1.0, a Cross-Site Request Forgery (CSRF) vulnerability exists in Users.php. It allows attackers to create unauthorized admin accounts by sending crafted requests to an authenticated admin user.

The risk is that an attacker can gain administrative control over the system by creating their own admin account, leading to unauthorized operations and compromise of data integrity and confidentiality.

Implement CSRF protection mechanisms such as anti-CSRF tokens in forms and validate Origin or Referer headers. Also, update the system to the latest version or apply a security patch.