by Kastro
Paper/Archive/CVE-2020-8520

CVE-2020-8520

phpzag phpzag live add edit delete data tables records with ajax php mysql — SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.6.726 × 2014.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Affected

ProductAffectedFixed inSource
phpzag live add edit delete data tables records with ajax php mysql1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refvapidlabs.com/advisory.php?v=213refphpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysqlrefopenwall.com/lists/oss-security/2020/07/09/1