← back
CVE-2020-35737

CVE-2020-35737

EPSS 10.3%
In Correspondence Management System (corms) in Newgen eGov 12.0, an attacker can modify other users' profile information by manipulating the unvalidated UserIndex parameter, aka Insecure Direct Object Reference.
Affected products
n/a · n/a
public PoCs found — 2
cve_referencepacketstormsecurity.com/files/160826/Newgen-Correspondence-Management-System-eGov-12.0-Insecure-Direct-Object-Reference.htmlunverifiedcve_referencewww.exploit-db.com/exploits/49378unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/160826/Newgen-Correspondence-Management-System-eGov-12.0-Insecure-Direct-Object-Reference.htmlhttps://gist.github.com/AliAlsinan/0323e57d2345ef0b4e73c803dba93486https://www.exploit-db.com/exploits/49378