medium6.5Public exploit code
CVE-2020-8425
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)2020-01-29 · webapps · php
Impact
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cups Easy \(Purchase \& Inventory\) Project | Cups Easy \(Purchase \& Inventory\) | Version 1.0 |