by Kastro
Paper/Archive/CVE-2020-8521

CVE-2020-8521

phpzag phpzag live add edit delete data tables records with ajax php mysql — SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 72.6.726 × 2014.5No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Affected

ProductAffectedFixed inSource
phpzag live add edit delete data tables records with ajax php mysql1.0–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refvapidlabs.com/advisory.php?v=213refphpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysqlrefopenwall.com/lists/oss-security/2020/07/09/1