CVE-2021-41074 - CERT CVE

  1. CVE-2021-41074

ID CVE-2021-41074
Sažetak A CSRF issue in index.php in QloApps hotel eCommerce 1.5.1 allows an attacker to change the admin's email address via a crafted HTML document.
Reference
CVSS
Base: 5.4
Impact: 2.5
Exploitability:2.8
Pristup
VektorSloženostAutentikacija
NETWORK LOW NONE
Impact
PovjerljivostCjelovitostDostupnost
LOW LOW NONE
CVSS vektor CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N
Zadnje važnije ažuriranje 22-01-2026 - 18:45
Objavljeno 12-01-2026 - 21:15