elaniin/CMS

elaniin/CMS

GitHubGitHub
GitHubgithub.com
elaniin.comelaniin.com
Releases0
Stars3
Open-source Content Management System created with PHP + MySQL
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2020-36999↗
8.2 HIGH—

Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting unauthorized access to the system.