CVE-2020-20586 | BDVDB-2026-156502 Detail

Description#

A cross site request forgery (CSRF) vulnerability in the /xyhai.php?s=/Auth/editUser URI of XYHCMS V3.6 allows attackers to edit any information of the administrator such as the name, e-mail, and password.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://www.xyhcms.com/Show/download/id/2/at/0.html
https://github.com/0xyu/PHP_Learning/issues/4

Exploit#

No public exploit known

History#

Version 12021-07-08Record published in the CVE List.
Version 22026-07-09Most recent update recorded in the CVE List.