PT-2020-20226

Name of the Vulnerable Software and Affected Versions eG Manager version 7.1.2 Description The issue allows SQL Injection via the user parameter to the com.eg.LoginHelperServlet, which is part of the Forgot Password feature. Recommendations For eG Manager version 7.1.2, consider restricting acces...

CVE-2020-8592: Improper Neutralization of Special Elements used in an SQL Command

eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...