Description osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF. References https://herolab.usd.de/security-advisories/usd-2020-0027/