Published: 28/01/2020 Updated: 07/02/2020

CVSS v2 Base Score: 4.3 | Impact Score: 2.9 | Exploitability Score: 8.6

CVSS v3 Base Score: 6.5 | Impact Score: 3.6 | Exploitability Score: 2.8

VMScore: 383

Vector: AV:N/AC:M/Au:N/C:N/I:P/A:N

Subscribe to Cups Easy \(purchase \& Inventory\) Project

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
cups easy \\(purchase \\& inventory\\) project cups easy \\(purchase \\& inventory\\) 1.0

Cups Easy version 10 suffers from a cross site request forgery vulnerability ...

Documentation for Exploits around CUPS Easy.

The Cups Easy (Purchase & Inventory) Web Appliction is vulnerable to CSRF that leads to admin (or arbitrary) account takeover or deletion CVE 2020-8425 CVE 2020-8424 Source for the Application: sourceforgenet/projects/cupseasy/files/cupseasylive-10/ Proof of Concept code to initiate the Password Change: <html> <body> <s

CWE-352 https://github.com/J3rryBl4nks/CUPSEasyExploits http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html https://nvd.nist.gov https://github.com/J3rryBl4nks/CUPSEasyExploits https://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-8425

Vulnerability Summary

Vulnerability Trend

Exploits

Github Repositories

References

Vulmon Search

About

Products

Connect