PT-2021-10595

Name of the Vulnerable Software and Affected Versions: EC Cloud E-Commerce System version 1.3 Description: The issue allows attackers to arbitrarily add admin accounts via the /admin.html?do=user&act=add endpoint. This is due to a Cross-Site Request Forgery CSRF in the EC Cloud E-Commerce System...