Skip to content
OpenAdvisories
Unscored CVE-2020-20642 EUVD-2020-13427GHSA-qprf-rrp5-5r9j

Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=adm…

Published Aug 19, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Cross Site Request Forgery (CSRF) vulnerability exists in EyouCMS 1.3.6 that can add an htm page to execute the js code via login.php?m=admin&c=Filemanager&a=newfile&lang=cn.

References