Files
CVEs-PoC/2020/CVE-2020-19263.md
T
2024-05-25 21:48:12 +02:00

639 B

CVE-2020-19263

Description

A cross-site request forgery (CSRF) in MipCMS v5.0.1 allows attackers to arbitrarily escalate user privileges to administrator via index.php?s=/user/ApiAdminUser/itemEdit.

POC

Reference

Github

No PoCs found on GitHub currently.