EG
Vendor
Egavilanmedia
17
CVEs
0
On KEV
0
New 30D
Products
UR9.8
User Registration And Login System With Admin Panel
Egavilanmedia
6 CVEs0 on KEV0 new
PH8.8
Phpcrud
Egavilanmedia
3 CVEs0 on KEV0 new
EM9.8
Expense Management System
Egavilanmedia
2 CVEs0 on KEV0 new
BG6.1
Barcodes Generator
Egavilanmedia
1 CVEs0 on KEV0 new
EA9.8
Ecm Address Book
Egavilanmedia
1 CVEs0 on KEV0 new
EP8.2
EgavilanMedia PHPCRUD
Egavilanmedia
1 CVEs0 on KEV0 new
EA9.8
Egm Address Book
Egavilanmedia
1 CVEs0 on KEV0 new
UC9.8
Under Construction Page With Cpanel
Egavilanmedia
1 CVEs0 on KEV0 new
UR8.0
User Registration & Login System With Admin Panel
Egavilanmedia
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2021-47956 | EP EgavilanMedia PHPCRUD Egavilanmedia | 8.2 | May 16 | EgavilanMedia PHPCRUD 1.0 SQL Injection via firstname |
| CVE-2024-8564 | PH Phpcrud Egavilanmedia | 8.8 | Sep 7 | SourceCodester PHP CRUD update.php sql injection |
| CVE-2024-8563 | PH Phpcrud Egavilanmedia | 6.1 | Sep 7 | SourceCodester PHP CRUD update.php cross site scripting |
| CVE-2021-44098 | EM Expense Management System Egavilanmedia | 9.8 | Jun 2 | EGavilan Media Expense-Management-System 1.0 is vulnerable to SQL Injection via /expense_action.php |
| CVE-2021-44096 | UR User Registration And Login System With Admin Panel Egavilanmedia | 9.8 | Jun 2 | EGavilan Media User-Registration-and-Login-System-With-Admin-Panel 1.0 is vulnerable to SQL Injection via profile_action - update_user |
| CVE-2020-36115 | PH Phpcrud Egavilanmedia | 5.4 | Jan 28 | Stored Cross Site Scripting (XSS) vulnerability in EGavilan Media CRUD Operation with PHP, MySQL, Bootstrap, and Dompdf via First Name or Last Name parameter in the 'Add New… |
| CVE-2020-35263 | UR User Registration And Login System With Admin Panel Egavilanmedia | 9.8 | Jan 26 | EgavilanMedia User Registration & Login System 1.0 is affected by SQL injection to the admin panel, which may allow arbitrary code execution |
| CVE-2020-29231 | UR User Registration And Login System With Admin Panel Egavilanmedia | 5.4 | Dec 30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Profile Page |
| CVE-2020-29230 | UR User Registration And Login System With Admin Panel Egavilanmedia | 6.1 | Dec 30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by cross-site scripting (XSS) in the Admin Panel - Manage User tab using the Full Name of the… |
| CVE-2020-29228 | UR User Registration And Login System With Admin Panel Egavilanmedia | 7.5 | Dec 30 | EGavilanMedia User Registration and Login System With Admin Panel 1.0 is affected by SQL injection in the User Login Page |
| CVE-2020-29474 | EA Egm Address Book Egavilanmedia | 9.8 | Dec 24 | EGavilan Media EGM Address Book 1.0 contains a SQL injection vulnerability |
| CVE-2020-29472 | UC Under Construction Page With Cpanel Egavilanmedia | 9.8 | Dec 24 | EGavilan Media Under Construction page with cPanel 1.0 contains a SQL injection vulnerability |
| CVE-2020-35252 | UR User Registration And Login System With Admin Panel Egavilanmedia | 6.1 | Dec 23 | Cross Site Scripting (XSS) vulnerability via the 'Full Name' parameter in the User Registration section of User Registration & Login System with Admin Panel 1.0 |
| CVE-2020-35276 | EA Ecm Address Book Egavilanmedia | 9.8 | Dec 21 | EgavilanMedia ECM Address Book 1.0 is affected by SQL injection |
| CVE-2020-35273 | UR User Registration & Login System With Admin Panel Egavilanmedia | 8.0 | Dec 21 | EgavilanMedia User Registration & Login System with Admin Panel 1.0 is affected by Cross Site Request Forgery (CSRF) to remotely gain privileges in the User Profile panel |
| CVE-2020-35396 | BG Barcodes Generator Egavilanmedia | 6.1 | Dec 15 | EGavilan Barcodes generator 1.0 is affected by: Cross Site Scripting (XSS) via the index.php |
| CVE-2020-35395 | EM Expense Management System Egavilanmedia | 6.1 | Dec 15 | XSS in the Add Expense Component of EGavilan Media Expense Management System 1.0 allows an attacker to permanently store malicious JavaScript code via the 'description' field |
