Show filters
2 Total Results
Displaying 1-2 of 2
Sort by:
Attacker Value
Unknown

CVE-2020-8425

Disclosure Date: January 28, 2020 (last updated February 21, 2025)
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account deletion via userdelete.php.
Attacker Value
Unknown

CVE-2020-8424

Disclosure Date: January 28, 2020 (last updated February 21, 2025)
Cups Easy (Purchase & Inventory) 1.0 is vulnerable to CSRF that leads to admin account takeover via passwordmychange.php.