PT-2020-17112 · Egavilanmedia · Egavilanmedia User Registration/Login System With Admin Panel

Hemant Patidar + 1 · Published 2020-12-30 · Updated 2021-01-04 · CVE-2020-29228

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions EGavilanMedia User Registration and Login System With Admin Panel version 1.0

Description The issue affects the User Login Page, where SQL injection is possible.

Recommendations For EGavilanMedia User Registration and Login System With Admin Panel version 1.0, consider implementing proper input validation and sanitization to prevent SQL injection attacks. As a temporary workaround, restrict access to the User Login Page until a fix is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-29228

Affected Products

Egavilanmedia User Registration/Login System With Admin Panel

References · 4

• 🔥 https://github.com/hemantsolo/CVE-Reference/blob/main/CVE-2020-29228.md · Exploit
• http://egavilanmedia.com · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-29228 · Security Note
• https://osv.dev/vulnerability/CVE-2020-29228 · Vendor Advisory