PatchTheCVE: midasolutionshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2020-15924: There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosurehttps://patchthecve.com/cve/CVE-2020-15924.htmlhttps://patchthecve.com/cve/CVE-2020-15924.htmlWed, 17 Jun 2026 02:57:24 +0000HIGH 7.5: There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters.CVE-2020-15923: Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.https://patchthecve.com/cve/CVE-2020-15923.htmlhttps://patchthecve.com/cve/CVE-2020-15923.htmlWed, 17 Jun 2026 02:57:24 +0000HIGH 7.5: Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.CVE-2020-15922: There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execuhttps://patchthecve.com/cve/CVE-2020-15922.htmlhttps://patchthecve.com/cve/CVE-2020-15922.htmlWed, 17 Jun 2026 02:57:24 +0000CRITICAL 9.8: There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.CVE-2020-15921: Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access https://patchthecve.com/cve/CVE-2020-15921.htmlhttps://patchthecve.com/cve/CVE-2020-15921.htmlWed, 17 Jun 2026 02:57:24 +0000CRITICAL 9.8: Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution.CVE-2020-15920: There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Cohttps://patchthecve.com/cve/CVE-2020-15920.htmlhttps://patchthecve.com/cve/CVE-2020-15920.htmlWed, 17 Jun 2026 02:57:24 +0000CRITICAL 9.8: There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.CVE-2020-15919: A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.https://patchthecve.com/cve/CVE-2020-15919.htmlhttps://patchthecve.com/cve/CVE-2020-15919.htmlWed, 17 Jun 2026 02:57:24 +0000MEDIUM 6.1: A Reflected Cross Site Scripting (XSS) vulnerability was discovered in Mida eFramework through 2.9.0.CVE-2020-15918: Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0.https://patchthecve.com/cve/CVE-2020-15918.htmlhttps://patchthecve.com/cve/CVE-2020-15918.htmlWed, 17 Jun 2026 02:57:24 +0000MEDIUM 5.4: Multiple Stored Cross Site Scripting (XSS) vulnerabilities were discovered in Mida eFramework through 2.9.0.