CVE-2020-29474: SQL Injection

Published Dec 24, 2020

Updated

EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability. An attacker can gain Admin Panel access using malicious SQL injection queries to perform remote arbitrary code execution.

Affected Software

1 affected component

EGavilanMedia Egm Address Book=1.0

Event History

Dec 24, 2020

CVE Published

via MITRE·07:36 PM

Data Sourced

via MITRE·07:36 PM

Description

Frequently Asked Questions

What is CVE-2020-29474?

CVE-2020-29474 is a SQL injection vulnerability in EGavilan Media EGM Address Book 1.0.

What is the severity of CVE-2020-29474?

The severity of CVE-2020-29474 is critical with a severity score of 9.8.

How does CVE-2020-29474 work?

An attacker can gain Admin Panel access by exploiting the SQL injection vulnerability in EGavilan Media EGM Address Book 1.0 using malicious SQL injection queries.

How can I fix CVE-2020-29474?

To fix CVE-2020-29474, it is recommended to apply the latest patch or update provided by EGavilan Media for EGM Address Book 1.0.

Are there any references for CVE-2020-29474?

Yes, you can find more information about CVE-2020-29474 at the following references: [Reference 1](https://systemweakness.com/cve-2020-29474-egavilanmedia-address-book-1-0-exploit-sqli-auth-bypass-228cd4864262) and [Reference 2](https://www.exploit-db.com/exploits/49182).