Skip to content
COOEY

FAIL › dossier

egavilanmedia

VENDOR

Failure events
1
Zero-days
0
RCEs
0
On KEV
0
Critical
1
Worst shame
35
Dossier not yet built — the RAG curator builds one for players with ≥2 failure events. The failure history and sentiment below are live.
FAILURE HISTORY · 1
DATEEVENTSEVSUMMARY
2020-12-21 CVE-2020-35276 critical EgavilanMedia ECM Address Book 1.0 is affected by SQL injection. An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user.
SENTIMENT · TRUSTED SOURCES
synthesissevere-fallout-0.50
Vulnerability confirmed but no vendor response or remediation details found in sources.
cooey ↗severe-fallout-0.80
Vulnerability confirmed with high impact (SQLi bypassing admin login)
"An attacker can bypass the Admin Login panel through SQLi and get Admin access and add or remove any user."
www.cvefind.com ↗severe-fallout+0.00
Neutral listing of CVE data
The Hacker News ↗severe-fallout+0.00
Irrelevant article about Microsoft 365 phishing
www.cbc.ca ↗severe-fallout+0.00
Irrelevant article about child exploitation
CISA ↗severe-fallout+0.00
Irrelevant CISA ICS advisories page
dailysecurityreview.com ↗severe-fallout+0.00
Irrelevant article about Roundcube webmail
dailysecurityreview.com ↗severe-fallout+0.00
Irrelevant article about Cloudflare developer domains