CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user=add...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 is affected by a Cross-Site Request Forgery (CSRF) vulnerability that lets an attacker add admin accounts via the URL /admin.html?do=user&act=add. The issue hinges on unauthorized state-changing requests being performed with a user’s browser session without proper ...

CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...