Mida Solutions eFramework Cross-Site Scripting Vulnerability

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. A cross-site scripting vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data by...

Mida Solutions eFramework Operating System Command Injection Vulnerability

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. An operating system command injection vulnerability exists in Mida Solutions eFramework version 2.9.0. A remote attacker can exploit the vulnerability to execute code with root...

Mida Solutions eFramework Cross-Site Scripting Vulnerability (CNVD-2020-42663)

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. A cross-site scripting vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. The vulnerability stems from a lack of proper validation of client-side data by...

Mida Solutions eFramework Path Traversal Vulnerability

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. A path traversal vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. The vulnerability stems from a failure of a networked system or product to properly...

Mida Solutions eFramework OS Command Injection Vulnerability (CNVD-2020-42664)

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. An operating system command injection vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. A remote attacker can exploit the vulnerability to execute code...

Mida eFramework SQL Injection Vulnerability

Mida Solutions eFramework is a suite of unified communications and collaboration services from Mida Solutions, Italy. A SQL injection vulnerability exists in Mida Solutions eFramework version 2.9.0 and earlier. An attacker could exploit the vulnerability to obtain information...

CVE-2020-15921

Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution...

CVE-2020-15924

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters...

CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

CVE-2020-15924

There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters...

CVE-2020-15921

Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution...

CVE-2020-15923

Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal...

CVE-2020-15922

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. Authentication is required...

CVE-2020-15922

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. Authentication is required...

CVE-2020-15920

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

CVE-2020-15918

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...

CVE-2020-15919

A Reflected Cross Site Scripting XSS vulnerability was discovered in Mida eFramework through 2.9.0...

CVE-2020-15920

There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution RCE with administrative root privileges. No authentication is required...

CVE-2020-15919

A Reflected Cross Site Scripting XSS vulnerability was discovered in Mida eFramework through 2.9.0...

CVE-2020-15918

Multiple Stored Cross Site Scripting XSS vulnerabilities were discovered in Mida eFramework through 2.9.0...