CVE-2020-19669

Cross Site Request Forgery CSRF vulnerability exists in Eyoucms 1.3.6 that can add an admin account via /login.php?m=admin=Admin=adminadd⟨=cn...

CVE-2020-19669

creationtimestamp| type| source ---|---|--- 2021-08-18 22:17:11+00:00| seen| https://t.me/cibsecurity/27565...

CVE-2020-19669

CVE-2020-19669 is a CSRF vulnerability in EyouCMS 1.3.6 that allows an attacker to add an admin account via crafted requests to login.php?m=admin&c=Admin&a=admin_add&lang=cn. Affected software: EyouCMS 1.3.6. Root cause: insufficient verification of that requests come from trusted users. Impact: ...