Medium severity6.5NVD Advisory· Published Nov 4, 2021· Updated Jun 17, 2026
CVE-2020-21139
CVE-2020-21139
Description
EC Cloud E-Commerce System v1.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily add admin accounts via /admin.html?do=user&act=add.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- cpe:2.3:a:ec_cloud_e-commerce_system_project:ec_cloud_e-commerce_system:1.3:*:*:*:*:*:*:*
(expand)+ 1 more
- (no CPE)
- (no CPE)range: =1.3
Patches
Vulnerability mechanics
References
1- github.com/Ryan0lb/EC-cloud-e-commerce-system-CVE-application/blob/master/README.mdnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.