phpzag

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

phpzag records in CISA KEV

No phpzag vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Phpzag · all components

TI-2020-06840 CVE-2020-8521 · GHSA-r7h7-hw98-4f74

MEDIUM 45

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2020-07-07 No fix listed CWE-89

TI-2020-06839 CVE-2020-8520 · GHSA-x6mj-jhv4-wq4x

MEDIUM 45

SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2020-07-07 No fix listed CWE-89

TI-2020-06838 CVE-2020-8519 · GHSA-r2cf-5fcm-2xwx

MEDIUM 45

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01407 Published 2020-07-07 No fix listed CWE-89