Record summary

CVE-2020-15922 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.

Description

There is an OS Command Injection in Mida eFramework 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. Authentication is required.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

Proofs of concept

1

Catalogued exploits

ExploitDBMida eFramework 2.8.9 - Remote Code ExecutionExploitDB exploitby elbaeNot analyzed1 file
ExploitDB

PoC details

References

3