high8.8Public exploit code
CVE-2020-8424
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)2020-01-29 · webapps · php
Impact
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cups Easy Project | Cups Easy | Version 1.0 |