CVEs-PoC/2020/CVE-2020-8424.md

CVE-2020-8424

Description

Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.

POC

Reference

• http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html
• https://github.com/J3rryBl4nks/CUPSEasyExploits

Github

No PoCs found on GitHub currently.