Description

osCommerce Phoenix CE before 1.0.5.4 allows admin/define_language.php CSRF.

Remediation

References

CVE-2020-27975

Related Vulnerabilities

WordPress Plugin Modern Events Calendar Lite Arbitrary File Upload (7.11.0)

Rukovoditel Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2022-43169)

OpenSSL NULL Pointer Dereference Vulnerability (CVE-2016-7052)

WordPress Plugin Gravity Forms Dynamics CRM Cross-Site Scripting (1.0.7)

WordPress Plugin Portfolio Gallery-Photo Gallery Multiple Unspecified Vulnerabilities (2.0.72)

Severity

High

Classification

CVE-2020-27975 CWE-352 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities