CVE PROGRAM SOURCE RECORDUnscored

CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=a

Status: Published
Published: 2021-11-04
Updated: 2024-08-04
Assigning organization: mitre

Description

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

n/a n/a

n/aaffected

References

https://github.com/Ryan0lb/EC-cloud-e-commerce-system-CVE-application/blob/master/README.md ↗