Vulnerabilities

TI-2021-22569 CVE-2021-47956 · GHSA-3hwx-xp9p-5jv3

EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname

HIGH 77

EgavilanMedia PHPCRUD 1.0 contains an SQL injection vulnerability that allows unauthenticated attackers to manipulate database queries by injecting SQL code through the firstname parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00276 Published 2026-05-16 No fix listed CWE-89

TI-2021-19822 CVE-2021-44096 · GHSA-r74q-w8wj-jh8x

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to…

MEDIUM 45

EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01304 Published 2022-05-31 No fix listed CWE-89

TI-2021-19824 CVE-2021-44098 · GHSA-2r88-ww5g-vx3h

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via…

MEDIUM 45

EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01473 Published 2022-05-31 No fix listed CWE-89

TI-2020-18449 CVE-2020-36115 · GHSA-7gf3-pjh4-q42g

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with…

LOW 25

Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New Record Feature'.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00602 Published 2021-01-28 No fix listed CWE-79

TI-2020-17924 CVE-2020-35263 · GHSA-xxp3-mm76-hhf2

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the…

MEDIUM 47

EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02568 Published 2021-01-26 No fix listed CWE-89

TI-2020-17606 CVE-2020-29231 · GHSA-2xc3-3457-6965

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by…

LOW 25

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00598 Published 2020-12-30 No fix listed CWE-79

TI-2020-17605 CVE-2020-29230 · GHSA-rjmp-wffv-9cmf

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by…

LOW 29

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the Full Name of the user.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00807 Published 2020-12-30 No fix listed CWE-79

TI-2020-17604 CVE-2020-29228 · GHSA-jcff-w8hg-gx77

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL…

LOW 35

EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.01146 Published 2020-12-30 No fix listed CWE-89

TI-2020-17697 CVE-2020-29474 · GHSA-8j5p-76rr-8r3x

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability.

MEDIUM 49

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0424 Published 2020-12-24 No fix listed CWE-89

TI-2020-17696 CVE-2020-29472 · GHSA-5x29-2xgq-48fc

EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection…

MEDIUM 49

EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04291 Published 2020-12-24 No fix listed CWE-89

TI-2020-17921 CVE-2020-35252 · GHSA-grmh-7h5f-7q6v

Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User…

LOW 29

Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00965 Published 2020-12-23 No fix listed CWE-79

TI-2020-17932 CVE-2020-35276 · GHSA-r7mj-3g43-28gm

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection.

MEDIUM 45

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01563 Published 2020-12-21 No fix listed CWE-89

TI-2020-17929 CVE-2020-35273 · GHSA-92h4-jh72-6gpm

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross…

LOW 36

EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.00569 Published 2020-12-21 No fix listed CWE-352

TI-2020-17967 CVE-2020-35396 · GHSA-7w35-wqxc-h6cq

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the…

LOW 30

EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.01149 Published 2020-12-15 No fix listed CWE-79

TI-2020-17966 CVE-2020-35395 · GHSA-4rc3-796r-hwf9

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows…

LOW 29

XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00856 Published 2020-12-15 No fix listed CWE-79

Vulnerabilities

Filters