Coppe Easy (Acquisti e scorte) 1.0 è vulnerabile a CSRF che porta alla amministrazione conto acquisizione tramite passwordmychange.php.
http://packetstormsecurity.com/files/156140/Cups-Easy-1.0-Cross-Site-Request-Forgery.html
https://github.com/J3rryBl4nks/CUPSEasyExploits
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8424