CVE-2020-21139

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via…

published November 4, 2021

CVSS
—
EPSS
0%
Percentile
40.0
In the wild
Unconfirmed
What it is

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00474 · 40.0th percentile
Published
2021-11-04T19:09Z
EPSS history
Timeline
  • 04 NOV 19:09Z
    EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via…
    cvelistv5