Vulnerability Description
Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms to add admin users and upload PHP files with unrestricted file upload capabilities through the FAQ attachment system.
CVSS Score
MEDIUM
Related Weaknesses (CWE)
References
- https://www.exploit-db.com/exploits/48386
- https://www.maiansupport.com
- https://www.vulncheck.com/advisories/maian-support-helpdesk-cross-site-request-f
FAQ
What is CVE-2020-37091?
CVE-2020-37091 is a vulnerability with a CVSS score of 5.3 (MEDIUM). Maian Support Helpdesk 4.3 contains a cross-site request forgery vulnerability that allows attackers to create administrative accounts without authentication. Attackers can craft malicious HTML forms ...
How severe is CVE-2020-37091?
CVE-2020-37091 has been rated MEDIUM with a CVSS base score of 5.3/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2020-37091?
Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.