CVE-2020-35276

9.8 criticalEPSS 1.6%

Critical (9.8) in egavilanmedia ecm address book. EPSS 1.6% chance of exploitation in the next 30 days.

EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 1.6% chance of exploitation in the next 30 days; higher than 75% of CVEs (scores of 2026-10-31)
CWE: CWE-89
Published: 2020-12-21
Modified: 2026-07-09
Record from: the NVD, synced 2026-10-19

Affected

egavilanmedia:ecm_address_book

References

https://hardik-solanki.medium.com/authentication-admin-panel-bypass-which-leads-to-full-admin-access-control-c10ec4ab4255
https://hardik-solanki.medium.com/authentication-admin-panel-bypass-which-leads-to-full-admin-access-control-c10ec4ab4255

Check your stack JSON