Lucene search

[email protected]CVE-2020-26766

HistoryDec 26, 2020 - 2:15 a.m.

CVE-2020-26766

2020-12-2602:15:12

CWE-352

[email protected]

web.nvd.nist.gov

cve-2020-26766

cross site request forgery

csrf

phpgurukul

user registration

user management

admin panel

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

A Cross Site Request Forgery (CSRF) vulnerability exists in the loginsystem page in PHPGurukul User Registration & Login and User Management System With Admin Panel 2.1.

Affected configurations

NVD

Node

user_registration_\&_login_and_user_management_system_with_admin_panel_projectuser_registration_\&_login_and_user_management_system_with_admin_panelMatch2.1

CPENameOperatorVersion
user_registration_\&_login_and_user_management_system_with_admin_panel_project:user_registration_\&_login_and_user_management_system_with_admin_paneluser registration & login and user management system with admin panel project user registration & login and user management system with admin paneleq2.1

CPE	Name	Operator	Version
user_registration_\&_login_and_user_management_system_with_admin_panel_project:user_registration_\&_login_and_user_management_system_with_admin_panel	user registration & login and user management system with admin panel project user registration & login and user management system with admin panel	eq	2.1

References

www.exploit-db.com/exploits/49180

Social References

6.8 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.7 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

43.5%

JSON

Related for CVE-2020-26766

cvelist1 nvd1 prion1