CVE-2020-20945

CVE-2020-20945

EPSS 0.6%

A Cross-Site Request Forgery (CSRF) in /admin/index.php?lfj=member&action=editmember of Qibosoft v7 allows attackers to arbitrarily add administrator accounts.

Affected products

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

https://blog.csdn.net/he_and/article/details/102698171 http://www.qibosoft.com/downloadProduction.htm