CVE-2020-21139

Published: 2021-11-04T20:15Z

Last Modified: 2024-11-21T05:12Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt