VULNERABILITY INTELLIGENCE

CVE-2020-35276

CVSS score9.8 CRITICAL
EPSS probability1.56%
CISA KEVNot currently listed
Published2020-12-21
Last modified2026-07-09
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references