CVE-2020-8425 – Cups Easy 1.0 - Cross Site Request Forgery (Password Reset)

https://notcve.org/view.php?id=CVE-2020-8425

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php. Cups Easy (Purchase & Inventory) versión 1.0, es vulnerable a un ataque de tipo CSRF que conlleva a la eliminación de la cuenta de administrador por medio del archivo userdelete.php. Cups Easy version 1.0 suffers from a cross site request forgery vulnerability. • https://www.exploit-db.com/exploits/47973 http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html https://github.com/J3rryBl4nks/CUPSEasyExploits • CWE-352: Cross-Site Request Forgery (CSRF) •