4 matches found
CVE-2021-41074
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document...
EUVD-2021-28225
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document...
CVE-2021-41074
A Cross-Site Request Forgery (CSRF) vulnerability exists in the index.php file of QloApps hotel eCommerce version 1.5.1 . An attacker can exploit this issue by tricking an administrator into interacting with a crafted HTML document , which could result in the unauthorized modification of the admi...
CVE-2021-41074: Cross-Site Request Forgery (CSRF)
A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document...