CVE-2020-24271
01.02.2021, 15:15
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***.
| Vendor | Product | Version |
|---|---|---|
| easycms | easycms | 1.6 |
𝑥
= Vulnerable software versions
Common Weakness Enumeration