Critical severity9.8NVD Advisory· Published Jul 24, 2020· Updated Jun 17, 2026
CVE-2020-15920
CVE-2020-15920
Description
There is an OS Command Injection in Mida eFramework through 2.9.0 that allows an attacker to achieve Remote Code Execution (RCE) with administrative (root) privileges. No authentication is required.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
3- Mida/eFrameworkdescription
- Range: <=2.9.0
- Range: <=2.9.0
Patches
Vulnerability mechanics
References
3- packetstormsecurity.com/files/158991/Mida-eFramework-2.9.0-Remote-Code-Execution.htmlnvdExploitThird Party AdvisoryVDB Entry
- packetstormsecurity.com/files/159194/Mida-Solutions-eFramework-ajaxreq.php-Command-Injection.htmlnvdExploitThird Party AdvisoryVDB Entry
- elbae.github.io/jekyll/update/2020/07/14/vulns-01.htmlnvdExploitThird Party Advisory
News mentions
0No linked articles in our index yet.