CVE-2020-8424
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.
- Affected products
- Cups Easy
- Cups Easy Project Cups Easy
- = 1.0
- Fix
- Available
- CVSS 3.1
- 8.8 HIGH
- EPSS
- 1.5% (73th percentile)
- Weakness
- CWE-352
- NVD status
- Modified
- Published
- 2020-01-28
CVE-2020-8424 at NVD
4 known exploits for CVE-2020-8424
Proof-of-concept code and exploit modules indexed by Sploitus