CVE-2020-29474 - EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability

Back Back to CVE browser

CRITICAL

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability

Published Dec 24, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 4.24%

Description

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://systemweakness.com/cve-2020-29474-egavilanmedia-address-book-1-0-exploit-sqli-auth-bypass-228cd4864262
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/49182
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://systemweakness.com/cve-2020-29474-egavilanmedia-address-book-1-0-exploit-sqli-auth-bypass-228cd4864262		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/49182		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Dec 24, 2020

Updated Aug 4, 2024

Reserved Dec 2, 2020

Link CVE-2020-29474

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-29474

Red Hat

Severity n/a

Public date n/a

Links CVE-2020-29474