CVE-2020-13156

描述

`modules\users\admin\add_user.php` in NukeViet 4.4 allows CSRF to add a user account via the `admin/index.php?nv=users&op=user_add` URI.

受影響套件(1)

• Packagist/nukeviet/nukeviet

CVSS 分數

參考連結(4)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2020-13156
• PATCHhttps://github.com/nukeviet/nukeviet
• WEBhttps://nukeviet.vn/en
• WEBhttps://www.exploit-db.com/exploits/48489