Unscored CVE-2020-35276 EUVD-2020-22954GHSA-r7mj-3g43-28gm

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin ac…

Published Dec 21, 2020 · Updated Jul 9, 2026 · Assigned by mitre

Description

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.

References

https://hardik-solanki.medium.com/authentication-admin-panel-bypass-which-leads-to-full-admin-access-control-c10ec4ab4255