EUVD-2020-10824

Malware in sbrugna...

CVE-2020-18913

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-20125

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

CVE-2019-5488

EARCLINK ESPCMS-P8 has SQL injection in the installpack/index.php?ac=Member=verifyAccount verifykey parameter. installpack/espcmspublic/espcmsdb.php may allow retrieving sensitive information from the ESPCMS database...

PT-2021-10434

Name of the Vulnerable Software and Affected Versions: EARCLINK ESPCMS-P8 Description: The issue is related to a cross-site scripting XSS vulnerability. This vulnerability is located in the espcms webespcms load.php file. Recommendations: For EARCLINK ESPCMS-P8, consider disabling access to the...

CVE-2020-20125: Improper Neutralization of Input During Web Page Generation

EARCLINK ESPCMS-P8 contains a cross-site scripting XSS vulnerability in espcmsweb\espcmsload.php...

Sql injection

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

CVE-2020-18913: Improper Neutralization of Special Elements used in an SQL Command

EARCLINK ESPCMS-P8 was discovered to contain a SQL injection vulnerability in the espcmsweb/Search.php component via the attrarray parameter. This vulnerability allows attackers to access sensitive database information...

PT-2021-10254

Name of the Vulnerable Software and Affected Versions: EARCLINK ESPCMS-P8 affected versions not specified Description: The issue is related to a SQL injection vulnerability in the espcms web/Search.php component. This vulnerability is exploited via the attr array parameter, allowing attackers to...

CVE-2019-5488

EARCLINK ESPCMS-P8 has SQL injection in the installpack/index.php?ac=Member&at=verifyAccount verifykey parameter. installpack/espcmspublic/espcmsdb.php may allow retrieving sensitive information from the ESPCMS database...

PT-2019-17706

Name of the Vulnerable Software and Affected Versions EARCLINK ESPCMS-P8 Description The issue concerns a SQL injection in the install pack/index.php ac=Member&at=verifyAccount endpoint, specifically in the verify key parameter. This could potentially allow an attacker to retrieve sensitive...

CVE-2019-5488: Improper Neutralization of Special Elements used in an SQL Command

EARCLINK ESPCMS-P8 has SQL injection in the installpack/index.php?ac=Member&at=verifyAccount verifykey parameter. installpack/espcmspublic/espcmsdb.php may allow retrieving sensitive information from the ESPCMS database...