Approved changes feed: RSS · Atom

cpe:2.3:a:midasolutions:eframework:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorMidasolutions (cb9a6b90-03d3-56be-9787-a6af28aa742d)
ProductEframework (1ba5915d-373a-582f-ad2e-ec1c0fe0aff9)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-15924 vulnerable 2026-06-08 05:19:27.173566 Details available
There is a SQL Injection in Mida eFramework through 2.9.0 that leads to Information Disclosure. No authentication is required. The injection point resides in one of the authentication parameters.
Published: 2020-07-24T00:58:06.000Z
Updated: 2024-08-04T13:30:23.212Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15923 vulnerable 2026-06-08 05:19:27.173271 Details available
Mida eFramework through 2.9.0 allows unauthenticated ../ directory traversal.
Published: 2020-07-24T00:58:17.000Z
Updated: 2024-08-04T13:30:23.200Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15922 vulnerable 2026-06-08 05:19:27.172893 Details available
There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.
Published: 2020-07-24T00:58:32.000Z
Updated: 2024-08-04T13:30:23.115Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15921 vulnerable 2026-06-08 05:19:27.172512 Details available
Mida eFramework through 2.9.0 has a back door that permits a change of the administrative password and access to restricted functionalities, such as Code Execution.
Published: 2020-07-24T00:58:43.000Z
Updated: 2024-08-04T13:30:22.716Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15920 vulnerable 2026-06-08 05:19:27.172208 Details available
There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.
Published: 2020-07-24T00:58:51.000Z
Updated: 2024-08-04T13:30:23.202Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15919 vulnerable 2026-06-08 05:19:27.171851 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-15918 vulnerable 2026-06-08 05:19:27.171358 db.gcve.eu details were skipped to keep the page responsive. Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.