itning Student Homework Management System Cross-Site Request Forgery Vulnerability

A cross-site request forgery (CSRF) vulnerability has been identified in itning Student Homework Management System versions through 1.2.7. This vulnerability allows attackers to manipulate requests and perform actions on behalf of users without their consent. The issue arises because the application does not adequately verify whether a request was intentionally made by the user. As a result, an attacker could exploit this vulnerability to, for example, add courses or perform other operations that require user interaction.

Impact

Exploitation of this vulnerability could lead to unauthorized actions being performed on behalf of the user, potentially allowing for the manipulation of data or application state.