CVE-2020-21139

Published November 4th, 2021

View on NVD ↗

CVSS v3

6.5

MEDIUM

CVSS v2

4.3

MEDIUM

Affected

PROJECT

Description

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.

Ryan0lb/EC-cloud-e-commerce-system-CVE-application

EC cloud e-commerce system CVE application

GitHub