CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user=add...

CVE-2020-21139: Cross-Site Request Forgery (CSRF)

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery CSRF which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add...

PT-2021-10595

Name of the Vulnerable Software and Affected Versions: EC Cloud E-Commerce System version 1.3 Description: The issue allows attackers to arbitrarily add admin accounts via the /admin.html?do=user&act=add endpoint. This is due to a Cross-Site Request Forgery CSRF in the EC Cloud E-Commerce System...