Browse CVEs

CRITICAL 9.8 CVE-2021-44096 EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user. This allows a… User Registration And Login System With Admin Panel No fix yet Fix from $2,3002022-06-02 CRITICAL 9.8 CVE-2021-44098 EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Appl… Expense Management System No fix yet Fix from $2,3002022-06-02 MEDIUM 5.4 CVE-2020-36115 Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name p… Phpcrud No fix yet Fix from $1,6002021-01-28 CRITICAL 9.8 CVE-2020-35263 EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution. User Registration And Login System With Admin Panel No fix yet Fix from $2,3002021-01-26 HIGH 7.5 CVE-2020-29228 EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page. User Registration And Login System With Admin Panel No fix yet Fix from $1,9502020-12-30 MEDIUM 6.1 CVE-2020-29230 EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab … User Registration And Login System With Admin Panel No fix yet Fix from $1,6002020-12-30 MEDIUM 5.4 CVE-2020-29231 EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulne… User Registration And Login System With Admin Panel No fix yet Fix from $1,6002020-12-30 CRITICAL 9.8 CVE-2020-29472 EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using maliciou… Under Construction Page With Cpanel No fix yet Fix from $2,3002020-12-24 CRITICAL 9.8 CVE-2020-29474 EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection que… Egm Address Book No fix yet Fix from $2,3002020-12-24 MEDIUM 6.1 CVE-2020-35252 Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admi… User Registration And Login System With Admin Panel No fix yet Fix from $1,6002020-12-23 CRITICAL 9.8 CVE-2020-35276 EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and a… Ecm Address Book Mitigation only Fix from $2,3002020-12-21 HIGH 8.0 CVE-2020-35273 EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in t… User Registration \& Login System With Admin Panel Mitigation only Fix from $1,9502020-12-21 MEDIUM 6.1 CVE-2020-35395 XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code vi… Expense Management System No fix yet Fix from $1,6002020-12-15 MEDIUM 6.1 CVE-2020-35396 EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the we… Barcodes Generator No fix yet Fix from $1,6002020-12-15