Vulnerability · Published Jan 29, 2026 · Assigned by VulnCheck
CVE-2020-36999elaniin CMS 1.0 - Authentication Bypass
High 8.2
In plain English
A high-severity SQL injection in Elaniin CMS from Elaniin. Proof-of-concept exploit code is public. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 28% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.3%top 72.3% of all CVEs
Exploited in the wildNo reportsCISA SSVC: poc
Attack toolingNoneno public tooling known
Official description
Elaniin CMS 1.0 contains an authentication bypass vulnerability that allows attackers to access the dashboard by manipulating the login page with SQL injection. Attackers can bypass authentication by sending crafted email and password parameters with '=''or' payload to login.php, granting unauthorized access to the system.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Elaniin | Elaniin CMS | 1.0 |
Weakness: CWE-89 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N
References
- ExploitDB-48705 exploit
- Vendor Homepage product
- Elaniin CMS GitHub Repository product
- VulnCheck Advisory: elaniin CMS 1.0 - Authentication Bypass third-party-advisory