CVE-2020-24271 Archives - RedPacket Security

CVE-2020-24271

February 6, 2021 admin CVE, CVE-2020-24271, exploit, MISC, vulnerability

A CSRF vulnerability was discovered in EasyCMS v1.6 that can add an admin account through index.php?s=/admin/rbacuser/insert/navTabId/rbacuser/callbackType/closeCurrent, then post username=***&password=***.