18 matches found
EUVD-2020-29439
Malware in sbrugna...
EUVD-2020-29440
Malware in sbrugna...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin==eGm0n1t0r request...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...
Authentication flaw
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...
Sql injection
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
CVE-2020-8591
CVE-2020-8591 affects eG Manager 7.1.2, where an authentication bypass is possible via the login endpoint com.egurkha.EgLoginServlet with parameters like uname=admin, upass=, accessKey=... This indicates a failure in access control for login handling that could grant unauthenticated access. Multi...
CVE-2020-8591
eG Manager 7.1.2 allows authentication bypass via a com.egurkha.EgLoginServlet?uname=admin&upass=&accessKey=eGm0n1t0r request...
CVE-2020-8592
The CVE-2020-8592 entry concerns eG Manager 7.1.2, where the Forgot Password path (com.eg.LoginHelperServlet) is vulnerable to SQL Injection via the user parameter. The NVD entry cites a high/critical impact with CVSS v3.1: Network, LOW attack complexity, no privileges required, and high confiden...
CVE-2020-8592
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
PT-2020-20226
Name of the Vulnerable Software and Affected Versions eG Manager version 7.1.2 Description The issue allows SQL Injection via the user parameter to the com.eg.LoginHelperServlet, which is part of the Forgot Password feature. Recommendations For eG Manager version 7.1.2, consider restricting acces...
CVE-2020-8592: Improper Neutralization of Special Elements used in an SQL Command
eG Manager 7.1.2 allows SQL Injection via the user parameter to com.eg.LoginHelperServlet aka the Forgot Password feature...
PT-2020-20225
Name of the Vulnerable Software and Affected Versions eG Manager version 7.1.2 Description The issue allows authentication bypass. This can be achieved via a request to the com.egurkha.EgLoginServlet endpoint with specific parameters, including uname, upass, and accessKey. For example, a request...