ecm_address_book vulnerabilities

CVEs whose affected-version data names the ecm_address_book package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2020-35276Critical· 9.8

5y ago

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.

▾ Midnightegavilanmedia · ecm_address_bookEPSS 1.6%via NVD