Unrated severityNVD Advisory· Published Feb 1, 2021· Updated Aug 4, 2024
CVE-2020-24271
CVE-2020-24271
Description
A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=*&password=*.
Affected products
2- EasyCMS/EasyCMSdescription
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.