critical9.8

CVE-2020-35276

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection.

Impact

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.

Affected products

Vendor	Product	Affected versions
Egavilanmedia	Ecm Address Book	Version 1.0

Weakness classification

CWE-89

References

NVD record
CVE.org record
https://hardik-solanki.medium.com/authentication-admin-panel-bypass-which-leads-to-full-admin-access-control-c10ec4ab4255
https://hardik-solanki.medium.com/authentication-admin-panel-bypass-which-leads-to-full-admin-access-control-c10ec4ab4255