CVE-2020-26522

ALTO 8.8CVE-2020-26522 · Published 09/10/2020 · updated 17/06/2026

In breve

CVE-2020-26522 è una vulnerabilità ALTO (CVSS 8.8) che riguarda garfield petshop (garfield petshop project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.77%, superiore al 55.8% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
garfield petshop garfield_petshop_project	`≤ 2020-10-01`	No fix yet

Description

A cross-site request forgery (CSRF) vulnerability in mod/user/act_user.php in Garfield Petshop through 2020-10-01 allows remote attackers to hijack the authentication of administrators for requests that create new administrative accounts.

References

packetstormsecurity.com/files/159520/Garfield-Petshop-2020-10-01-Cross-Site-Request-Forgery.html · Third Party Advisory
rysec.io/adv/Petshop_AddAdmin_Exploit.txt · Exploit
demo.detapos.co.id/petshop · Permissions Required
detapos.co · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free