Lucene search
+L

5 matches found

NVD
NVD
•added 2020/01/28 11:15 p.m.•33 views

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

8.8CVSS8.7AI score0.01548EPSS
SaveExploits5References2
osv_cve
osv_cve
•added 2020/01/28 11:15 p.m.•17 views

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

8.8CVSS7.3AI score0.01548EPSS
SaveExploits5References2
Cvelist
Cvelist
•added 2020/01/28 10:11 p.m.•46 views

CVE-2020-8424

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

8.7AI score0.01548EPSS
SaveExploits5References2
Positive Technologies
Positive Technologies
•added 2020/01/28 12:00 a.m.•4 views

PT-2020-20128

Name of the Vulnerable Software and Affected Versions Cups Easy Purchase & Inventory version 1.0 Description The issue allows for admin account takeover via the passwordmychange.php endpoint due to a CSRF vulnerability. Recommendations For version 1.0, as a temporary workaround, consider...

8.8CVSS0.01548EPSS
SaveExploits5References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2020/01/28 12:00 a.m.•5 views

CVE-2020-8424: Cross-Site Request Forgery (CSRF)

Cups Easy Purchase & Inventory 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php...

8.8CVSS7.8AI score0.01548EPSS
SaveExploits5References2
Rows per page
Query Builder