4 matches found
EgavilanMedia ECM Address Book SQL Injection (CVE-2020-35276)
An SQL injection vulnerability exists in EgavilanMedia ECM Address Book. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
CVE-2020-35276
EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user...
CVE-2020-35276
CVE-2020-35276 affects EgavilanMedia ECM Address Book 1.0 and is caused by an SQL injection that can bypass the Admin Login panel, enabling an attacker to gain Admin access and add or remove users. The connected records confirm the vulnerability exists and describe the impact as admin access via ...
