CVE-2020-18131 Information

Description

Cross Site Request Forgery (CSRF) vulnerability in Bluethrust Clan Scripts v4 allows attackers to escilate privledges to an arbitrary account via a crafted request to /members/console.php?cID=5.

Reference

https://github.com/bluethrust/clanscripts/issues/27 https://github.com/bluethrust/clanscripts