Online Shopping System Master version 1.0 suffers from a cross site request forgery vulnerability.