critical9.8
CVE-2020-8520
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Impact
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpzag | Phpzag | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2020/07/09/1
- http://www.vapidlabs.com/advisory.php?v=213
- https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/
- http://www.openwall.com/lists/oss-security/2020/07/09/1
- http://www.vapidlabs.com/advisory.php?v=213
- https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/