VYPR
← All advisories
High severity8.8NVD Advisory· Published Aug 31, 2021· Updated Jun 17, 2026

CVE-2020-19047

CVE-2020-19047

Description

Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.

Affected products

4
  • iWebShop/iWebShop2 versions
    cpe:2.3:a:iwebshop:iwebshop:5.3:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:iwebshop:iwebshop:5.3:*:*:*:*:*:*:*
    • (no CPE)range: =5.3
  • iWebShop/iWebShopdescription
  • Aoyanm/auditllm-create

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.