What is CVE-2020-36999?

CVE-2020-36999 is a high-severity vulnerability in Elaniin Cms, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-29.

How severe is CVE-2020-36999?

High severity. CVSS v3 base score is 8.2 out of 10.

SQL Injection in Elaniin Cms

CVE-2020-36999

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting unauthorized access to the system.

Vulnerability class: SQL Injection

EPSS: 0.003 (22.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N.

Affected products

Elaniin Cms — versions 1.0

Weakness classification (CWE)

CWE-89 — SQL Injection

References

disclosure@vulncheck.com (exploit)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (product)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2020-36999?: CVE-2020-36999 is a high-severity vulnerability in Elaniin Cms, classified under SQL Injection. CVSS score: 8.2/10. Published 2026-01-29.
How severe is CVE-2020-36999?: High severity. CVSS v3 base score is 8.2 out of 10.