CVE-2025-50926

MEDIUM

Easy Hosting Control Panel 20.04.1.b - SQL Injection via List All Email Addresses id Parameter

Title source: llm
STIX 2.1

Description

Easy Hosting Control Panel EHCP v20.04.1.b was discovered to contain a SQL injection vulnerability via the id parameter in the List All Email Addresses function.

References (2)

Core 2
Core References
Exploit, Third Party Advisory
https://packetstorm.news/files/id/207907

Scores

CVSS v3 6.5
EPSS 0.0024
EPSS Percentile 15.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact total

Details

CWE
CWE-89
Status published
Products (1)
ehcp/easy_hosting_control_panel 20.04.1.b
Published Aug 19, 2025
Tracked Since Feb 18, 2026