{"id":"CVE-2024-57523","aliases":["EUVD-2024-53610","GHSA-4x68-m756-9hv9"],"status":"published","title":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management...","description":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.","severity":{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp","from":"cve"},"epss":{"day":"2026-11-12","score":0.00498,"percentile":0.43168,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-352"],"published":"2025-02-06T00:00:00Z","modified":"2026-07-05T01:21:20Z","exploits":[{"source":"pocgithub","id":"HackWidMaddy/CVE-2024-57523.","title":"HackWidMaddy/CVE-2024-57523.","date":"2025-01-15","url":"https://github.com/HackWidMaddy/CVE-2024-57523."}],"products":[{"vendor":"oretnom23","product":"packers_and_movers_management_system"}],"references":[{"url":"https://github.com/HackWidMaddy/CVE-2024-57523.","tags":["exploit","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-57523"},{"url":"http://sourcecodester.com"},{"url":"https://github.com/advisories/GHSA-4x68-m756-9hv9"}],"sources":{"cve":[{"id":"CVE-2024-57523","description":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.","status":"published","published":"2025-02-06T00:00:00Z","modified":"2026-07-05T00:55:42.369Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"adp"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:34:07.152829Z"}],"euvd":[{"id":"EUVD-2024-53610","description":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.","status":"published","published":"2025-02-06T00:00:00Z","modified":"2026-07-05T00:55:42Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"updated_at":"2026-11-02T18:20:16.016392Z"}],"ghsa":[{"id":"GHSA-4x68-m756-9hv9","title":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management...","description":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.","status":"published","published":"2025-02-06T21:32:09Z","modified":"2025-02-06T21:32:15Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:59:49.339987Z"}],"nvd":[{"id":"CVE-2024-57523","description":"Cross Site Request Forgery (CSRF) in Users.php in SourceCodester Packers and Movers Management System 1.0 allows attackers to create unauthorized admin accounts via crafted requests sent to an authenticated admin user.","status":"published","published":"2025-02-06T19:15:19.547Z","modified":"2026-07-05T01:21:20.317Z","cvss":[{"version":"3.1","score":4.5,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:N/I:H/A:N","level":"medium","assessor":"secondary"}],"cwes":["CWE-352"],"updated_at":"2026-11-02T14:10:44.033107Z"}]}}