CVE-2020-20125

The provided evidence centers on CVE-2020-20125 affecting EARCLINK ESPCMS-P8. A cross-site scripting (XSS) vulnerability is reported in espcms_web\espcms_load.php. Documents do not specify the exact root cause, affected versions, exploitation details, or mitigations. The connected sources confirm...

CVE-2019-5488

Affected product : EARCLINK ESPCMS-P8. The vulnerability is a SQL injection in the ESPCMS components: install_pack/index.php?ac=Member&at=verifyAccount (verify_key parameter) and install_pack/espcms_public/espcms_db.php, which may allow retrieving sensitive information from the ESPCMS database. T...