CVE-2020-35273: CSRF
EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel. An attacker can update any user's account.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2020-35273?
The severity of CVE-2020-35273 is high with a severity value of 8.
How does CVE-2020-35273 affect EgavilanMedia User Registration & Login System with Admin Panel?
CVE-2020-35273 affects EgavilanMedia User Registration & Login System with Admin Panel by allowing attackers to perform Cross-Site Request Forgery (CSRF) attacks to gain unauthorized privileges in the User Profile panel.
How can an attacker exploit CVE-2020-35273?
An attacker can exploit CVE-2020-35273 by sending malicious requests that trick authenticated users into performing unintended actions on the User Profile panel.
Is there a fix available for CVE-2020-35273?
At the moment, there is no known fix available for CVE-2020-35273. It is recommended to apply security patches or updates provided by the vendor or consider alternative solutions.
Where can I find more information about CVE-2020-35273?
You can find more information about CVE-2020-35273 on the official website of EgavilanMedia (http://egavilanmedia.com) and on the Exploit Database (https://www.exploit-db.com/exploits/49151).