CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

CVE-2020-15922

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. Authentication is required...

CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

CVE-2020-15922

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. Authentication is required...

CVE-2020-15920

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

CVE-2020-15918

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...

CVE-2020-15919

A Reflected Cross Site Scripting XSS vulnerability was discovered in Mida eFramework through 2.9.0...

CVE-2020-15920

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

CVE-2020-15919

A Reflected Cross Site Scripting XSS vulnerability was discovered in Mida eFramework through 2.9.0...

CVE-2020-15918

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...

Command injection

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

Cross site scripting

A Reflected Cross Site Scripting XSS vulnerability was discovered in Mida eFramework through 2.9.0...

Command injection

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. Authentication is required...

Directory traversal

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

Sql injection

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters...

Cross site scripting

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...

Design/Logic Flaw

Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution...

CVE-2020-15918

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...

CVE-2020-15918

Multiple Stored Cross Site Scripting (XSS) vulnerabilities affect Mida Solutions eFramework up to version 2.9.0. CNVD-2020-42663 details a lack of proper validation of client-side data by the WEB application, enabling attacker-controlled input to be reflected and potentially execute client-side c...

CVE-2020-15919

The CVE-2020-15919 entry concerns Mida eFramework up to version 2.9.0 with a Reflected Cross Site Scripting (XSS) vulnerability. The connected documents attribute the issue to a lack of proper validation of client-side data in the WEB application, enabling potential client-side code execution. No...