Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.
References
Link | Resource |
---|---|
https://github.com/eyoucms/eyoucms/issues/5 | Exploit Issue Tracking Third Party Advisory |
Configurations
Information
Published : 2021-08-19 12:15
Updated : 2021-08-23 07:57
NVD link : CVE-2020-20642
Mitre link : CVE-2020-20642
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
eyoucms
- eyoucms