by Kastro
Paper/Archive/CVE-2020-8519

CVE-2020-8519

phpzag phpzag live add edit delete data tables records with ajax php mysql — SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.6.726 × 2014.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Affected

ProductAffectedFixed inSource
phpzag live add edit delete data tables records with ajax php mysql1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refvapidlabs.com/advisory.php?v=213refphpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysqlrefopenwall.com/lists/oss-security/2020/07/09/1