kurniaramadhan E-Commerce-PHP Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in kurniaramadhan E-Commerce-PHP version 1.0. This vulnerability allows remote attackers to manipulate users into performing actions without their consent, as the application lacks proper CSRF protection.

Impact

Exploitation of this vulnerability can lead to unauthorized actions being performed on behalf of users, potentially compromising their accounts and causing disruptions in the application's functionality.

Reproduction

The vulnerability can be reproduced by sending a malicious link to a user or admin. When the link is clicked, the user is not prompted for confirmation, and the action is performed automatically, taking advantage of the absence of CSRF protection.