Midasolutions Eframework
7 CVEs affecting Midasolutions Eframework. Latest disclosed: 2020-07-24. Critical: 3, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-15922 | Critical | 9.8 | 2020-07-24 | There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges… |
CVE-2020-15921 | Critical | 9.8 | 2020-07-24 | Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execu… |
CVE-2020-15920 | Critical | 9.8 | 2020-07-24 | There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) pri… |
CVE-2020-15924 | High | 7.5 | 2020-07-24 | There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in o… |
CVE-2020-15923 | High | 7.5 | 2020-07-24 | Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal. |
CVE-2020-15919 | Medium | 6.1 | 2020-07-24 | A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0. |
CVE-2020-15918 | Medium | 5.4 | 2020-07-24 | Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0. |