CSRF in Egavilanmedia User Registration \& Login System With Admin Panel
CVE-2020-35273
EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.
Vulnerability class: CSRF (Cross-Site Request Forgery)
EPSS: 0.006 (43.2th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.0 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H.
Affected products
- Egavilanmedia User_registration_\&_login_system_with_admin_panel — versions 1.0
- N/a — versions n/a
Weakness classification (CWE)
References
- af854a3a-2127-422b-91ae-364da2661108 (x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (Exploit, VDB Entry, Third Party Advisory, x_refsource_MISC)
Frequently asked questions
- What is CVE-2020-35273?
- CVE-2020-35273 is a high-severity vulnerability in Egavilanmedia User Registration \& Login System With Admin Panel, classified under Cross-Site Request Forgery (CSRF). CVSS score: 8.0/10. Published 2020-12-21.
- How severe is CVE-2020-35273?
- High severity. CVSS v3 base score is 8.0 out of 10.