Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Cross Site Request Forgery (CSRF) vulnerability in Booking Core - Ultimate Booking System Booking Core 1.7.0 . The CSRF token is not being validated when the request is sent as a GET method. This results in an unauthorized change in the user's email ID, which can later be used to reset the password. The new password will be sent to a modified email ID.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Booking Core 跨站请求伪造漏洞
Vulnerability Description
Booking Core是一个应用软件。一个基于Laravel的预订系统，专为旅游网站、商城、旅行社、旅行社、民宿、别墅出租、度假村出租、Make Travel 网站而设计。 Booking Core 存在跨站请求伪造漏洞，该漏洞源于Booking Core-Ultimate Booking System在请求作为GET方法发送时，不验证CSRF令牌。攻击者可利用该漏洞导致用户的电子邮件ID发生未经授权的更改，该更改稍后可用于重置密码，新密码将被发送到修改后的电子邮件ID。
CVSS Information
N/A
Vulnerability Type
N/A