ShadowTrackr

Search the CVE vulnerability database

Look up vulnerabilities by software, product or CVE number.

1 result for “CVE-2020-21139”

CVEPublishedCVSSShadowTrackr CVSSSummary
CVE:
CVE-2020-21139
Published
2021-11-04
CVSS:
6.5
ShadowTrackr CVSS:
2.1
Summary:
EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.