Description
Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the component '/index.php?controller=system&action=admin_edit_act'.
Unscored
CVE-2020-19047
EUVD-2020-10954GHSA-88c9-rr9p-5764
Cross Site Request Forgey (CSRF) in iWebShop v5.3 allows remote atatckers to execute arbitrary code via malicious POST request to the compo…
Published Aug 31, 2021 · Updated Aug 4, 2024 · Assigned by mitre