PT-2026-5275 · Elaniin · Elaniin Cms

Bkpatron · Published 2026-01-29 · Updated 2026-01-29 · CVE-2020-36999

Positive Technologies (AI Summary)

CVSS v3.1

8.2

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Name of the Vulnerable Software and Affected Versions Elaniin CMS version 1.0

Description An authentication bypass exists that allows unauthorized access to the dashboard via SQL injection on the login page. Attackers can gain access by sending crafted email and password parameters containing the '=''or' payload to the 'login.php' endpoint.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2020-36999

Affected Products

Elaniin Cms

References · 5

• 🔥 https://exploit-db.com/exploits/48705 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2020-36999 · Security Note
• https://github.com/elaniin/CMS · Note
• https://vulncheck.com/advisories/elaniin-cms-authentication-bypass · Note
• https://elaniin.com · Note