PatchTheCVEegavilanmedia vulnerabilities
Recent CVEs affecting egavilanmedia products. 14 tracked.
egavilanmedia has 14 tracked vulnerabilities, 6 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-06-02. Highest priority: CVE-2020-29474 (score 67/100).
- CVE-2020-35276 CRITICAL 9.8 DOWNGRADE EgavilanMedia ECM Address Book 1.0 is affected by SQL injection
- CVE-2020-35273 HIGH 8.0 DOWNGRADE EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery
- CVE-2020-29231 MEDIUM 5.4 DOWNGRADE EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS
- CVE-2020-29230 MEDIUM 6.1 DOWNGRADE EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS
- CVE-2020-29228 HIGH 7.5 DOWNGRADE EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User
- CVE-2021-44098 CRITICAL 9.8 DOWNGRADE EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php
- CVE-2021-44096 CRITICAL 9.8 DOWNGRADE EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via prof
- CVE-2020-36115 MEDIUM 5.4 DOWNGRADE Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, a
- CVE-2020-35396 MEDIUM 6.1 DOWNGRADE EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php
- CVE-2020-35395 MEDIUM 6.1 DOWNGRADE XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permane
- CVE-2020-35263 CRITICAL 9.8 DOWNGRADE EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may
- CVE-2020-35252 MEDIUM 6.1 DOWNGRADE Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of Use
- CVE-2020-29474 CRITICAL 9.8 DOWNGRADE EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability
- CVE-2020-29472 CRITICAL 9.8 DOWNGRADE EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability
FAQ
How do I fix egavilanmedia vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is egavilanmedia being exploited right now?
None of the tracked egavilanmedia CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which egavilanmedia CVE should I patch first?
CVE-2020-29474 currently ranks highest (67/100): EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability.