CVE-2020-8520 - SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

CRITICAL

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Published Jul 7, 2020

9.8

CRITICAL

CVSS 3.1

EPSS 1.41%

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
1.0	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
http://www.openwall.com/lists/oss-security/2020/07/09/1		mailing-listx_refsource_MLISTExploitThird Party Advisory
http://www.vapidlabs.com/advisory.php?v=213		x_refsource_MISCExploitThird Party Advisory
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-29386		Advisory
https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/		x_refsource_MISCProductVendor Advisory