Egavilanmedia
15 CVEs across 9 Egavilanmedia products. Browse Egavilanmedia vulnerabilities, severities, and proof-of-concept exploits.
Egavilanmedia products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-47956 | High | 8.2 | 2026-05-16 | EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code th… |
CVE-2021-44098 | Critical | 9.8 | 2022-06-02 | EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php. This allows a remote attacker to compromise Application SQ… |
CVE-2021-44096 | Critical | 9.8 | 2022-06-02 | EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user. This allows a remote at… |
CVE-2020-36115 | Medium | 5.4 | 2021-01-28 | Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter i… |
CVE-2020-35263 | Critical | 9.8 | 2021-01-26 | EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution. |
CVE-2020-29231 | Medium | 5.4 | 2020-12-30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page. This vulnerability c… |
CVE-2020-29230 | Medium | 6.1 | 2020-12-30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the… |
CVE-2020-29228 | High | 7.5 | 2020-12-30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page. |
CVE-2020-29474 | Critical | 9.8 | 2020-12-24 | EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to pe… |
CVE-2020-29472 | Critical | 9.8 | 2020-12-24 | EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL inje… |
CVE-2020-35252 | Medium | 6.1 | 2020-12-23 | Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1… |
CVE-2020-35276 | Critical | 9.8 | 2020-12-21 | EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remo… |
CVE-2020-35273 | High | 8.0 | 2020-12-21 | EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Pr… |
CVE-2020-35396 | Medium | 6.1 | 2020-12-15 | EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php. An Attacker is able to inject the XSS payload in the web applicat… |
CVE-2020-35395 | Medium | 6.1 | 2020-12-15 | XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'des… |