CVE-2020-19047

Cross Site Request Forgey CSRF in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admineditact'...

PT-2021-10276

Name of the Vulnerable Software and Affected Versions: iWebShop version 5.3 Description: The issue allows remote attackers to execute arbitrary code via a malicious POST request to the "/index.php?controller=system&action=admin edit act" API endpoint. This is a Cross Site Request Forgery CSRF...