CVE-2020-35273

Published: Dec 21, 2020Modified: Jul 9, 2026

8.0

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H

Exploitability: 2.1 / Impact: 5.9

Source: NVD

Description

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.

Affected (1)

Products: Egavilanmedia: User Registration & Login System With Admin Panel

Egavilanmedia

1 product

User Registration & Login System With Admin Panel

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Egavilanmedia User Registration & Login System With Admin Panel	Version 1.0

Related CWEs

CWE-352

Cross-Site Request Forgery (CSRF)

The web application does not, or can not, sufficiently verify whether a well-formed, valid, consistent request was intentionally provided by the user who submitted the request.

References (2)

https://www.exploit-db.com/exploits/49151

Source: cve@mitre.org

ExploitThird Party AdvisoryVDB Entry

https://www.exploit-db.com/exploits/49151

Source: af854a3a-2127-422b-91ae-364da2661108

ExploitThird Party AdvisoryVDB Entry

Timeline

No history available yet.