Skip to content
OpenAdvisories

Vendor

Elektraweb

1 known vulnerabilities.

Products

EasyPMS 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2020-37008

    EasyPMS 1.0.0 - Authentication Bypass

    EasyPMS 1.0.0 contains an authentication bypass vulnerability that allows unprivileged users to manipulate SQL queries in JSON requests to access admin user information. Attackers can exploit weak input validation by injecting single quotes in ID parameters a…

    Elektraweb EasyPMS