CVE-2020-36062

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Dairy Farm Shop Management System v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the control panel if compromised.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Feb 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-360649.8Online Course Registration v1.0 was discovered to contain hardcoded credentials in the source code which allows attackers access to the cont CVE-2020-360658.8Cross Site Request Forgery (CSRF) vulnerability in FlyCms 1.0 allows attackers to add arbitrary administrator accounts via system/admin/admi CVE-2020-360667.5GJSON <1.6.5 allows attackers to cause a denial of service (remote) via crafted JSON.CVE-2020-360677.5GJSON <=v1.6.5 allows attackers to cause a denial of service (panic: runtime error: slice bounds out of range) via a crafted GET call.CVE-2020-360709.8Insecure Permission vulnerability found in Yoyager v.1.4 and before allows a remote attacker to execute arbitrary code via a crafted .php fi CVE-2020-360718.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the c CVE-2020-360728.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.CVE-2020-360738.8SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail paramete CVE-2020-360748.8SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter.CVE-2020-360778.8SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer paramet CVE-2020-360797.2Zenphoto through 1.5.7 is affected by authenticated arbitrary file upload, leading to remote code execution. The attacker must navigate to t CVE-2020-360829.8File Upload vulnerability in bloofoxCMS version 0.5.2.1, allows remote attackers to execute arbitrary code and escalate privileges via craft