CVE-2020-36999

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting...

CVE-2020-36999

CVE-2020-36999 concerns Elaniin CMS 1.0, where an authentication bypass is achievable via SQL injection on the login page. The vulnerability arises from crafted login parameters (email/password) containing an "='' or" payload sent to login.php, allowing attackers to bypass authentication and gain...

CVE-2020-36999 elaniin CMS 1.0 - Authentication Bypass

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting...