CVE-2024-57523

Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.

CVSS v3.1

4.5 MEDIUMCVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N

EPSS

0.50% chance of exploitation in the next 30 days, 41th percentile

Published

2025-02-06

Updated

2026-07-05

Proof-of-concept exploits (2)

• HackWidMaddy/CVE-2024-57523.0★ · 2025-01-15
• HackWidMaddy/CVE-2024-575221★ · 2025-01-19

References

• CVE Record
• NVD entry

Related

• CVE-2024-57522
• CVE-2024-57529
• CVE-2024-57521
• CVE-2024-57536
• CVE-2024-57519
• CVE-2024-57537