critical9.8
CVE-2020-8521
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Impact
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpzag | Phpzag | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.openwall.com/lists/oss-security/2020/07/09/1
- http://www.vapidlabs.com/advisory.php?v=213
- https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/
- http://www.openwall.com/lists/oss-security/2020/07/09/1
- http://www.vapidlabs.com/advisory.php?v=213
- https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/