Browse CVEs

CRITICAL 9.8 CVE-2020-15921EPSS 18% Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as … Eframework after 2.9.0 Fix from $2,3002020-07-24 CRITICAL 9.8 CVE-2020-15922EPSS 57% There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) p… Eframework after 2.9.0 Fix from $2,3002020-07-24 HIGH 7.5 CVE-2020-15923 Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. Eframework after 2.9.0 Fix from $1,9502020-07-24 HIGH 7.5 CVE-2020-15924 There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point re… Eframework after 2.9.0 Fix from $1,9502020-07-24 CRITICAL 9.8 CVE-2020-15920EPSS 98% There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative … Eframework after 2.9.0 Fix from $2,3002020-07-24 MEDIUM 6.1 CVE-2020-15919 A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. Eframework after 2.9.0 Fix from $1,6002020-07-24 MEDIUM 5.4 CVE-2020-15918 Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. Eframework after 2.9.0 Fix from $1,6002020-07-24