Search criteria

9 vulnerabilities found for phpzag by phpzag

FKIE_CVE-2020-8521

Vulnerability from fkie_nvd - Published: 2020-07-07 20:15 - Updated: 2024-11-21 05:38
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
References
larry0@me.comhttp://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
larry0@me.comhttp://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
larry0@me.comhttps://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
Impacted products
Vendor Product Version
phpzag phpzag -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpzag:phpzag:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F1CDD1-16F1-41FF-B4A3-B147EA06000C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
    },
    {
      "lang": "es",
      "value": "Una inyecci\u00f3n SQL con par\u00e1metros start y length del archivo Records.php para phpzag live agregar editar eliminar registros de tablas de datos con ajax php mysql"
    }
  ],
  "id": "CVE-2020-8521",
  "lastModified": "2024-11-21T05:38:59.543",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-07-07T20:15:10.337",
  "references": [
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    }
  ],
  "sourceIdentifier": "larry0@me.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2020-8520

Vulnerability from fkie_nvd - Published: 2020-07-07 20:15 - Updated: 2024-11-21 05:38
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
References
larry0@me.comhttp://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
larry0@me.comhttp://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
larry0@me.comhttps://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
Impacted products
Vendor Product Version
phpzag phpzag -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpzag:phpzag:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F1CDD1-16F1-41FF-B4A3-B147EA06000C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
    },
    {
      "lang": "es",
      "value": "Una inyecci\u00f3n SQL en los par\u00e1metros order y column del archivo Records.php para phpzag live agregar editar eliminar registros de tablas de datos con ajax php mysql"
    }
  ],
  "id": "CVE-2020-8520",
  "lastModified": "2024-11-21T05:38:59.440",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-07-07T20:15:10.277",
  "references": [
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    }
  ],
  "sourceIdentifier": "larry0@me.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

FKIE_CVE-2020-8519

Vulnerability from fkie_nvd - Published: 2020-07-07 20:15 - Updated: 2024-11-21 05:38
Severity ?
9.8 (Critical) - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Summary
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql
References
larry0@me.comhttp://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
larry0@me.comhttp://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
larry0@me.comhttps://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.openwall.com/lists/oss-security/2020/07/09/1Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108http://www.vapidlabs.com/advisory.php?v=213Exploit, Third Party Advisory
af854a3a-2127-422b-91ae-364da2661108https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/Product, Vendor Advisory
Impacted products
Vendor Product Version
phpzag phpzag -
To clipboard 

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:phpzag:phpzag:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "48F1CDD1-16F1-41FF-B4A3-B147EA06000C",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
    },
    {
      "lang": "es",
      "value": "Una inyecci\u00f3n SQL con el par\u00e1metro search del archivo Records.php para phpzag live agregar editar eliminar registros de tablas de datos con ajax php mysql"
    }
  ],
  "id": "CVE-2020-8519",
  "lastModified": "2024-11-21T05:38:59.327",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "LOW",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "PARTIAL",
          "baseScore": 7.5,
          "confidentialityImpact": "PARTIAL",
          "integrityImpact": "PARTIAL",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "version": "2.0"
        },
        "exploitabilityScore": 10.0,
        "impactScore": 6.4,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": false
      }
    ],
    "cvssMetricV31": [
      {
        "cvssData": {
          "attackComplexity": "LOW",
          "attackVector": "NETWORK",
          "availabilityImpact": "HIGH",
          "baseScore": 9.8,
          "baseSeverity": "CRITICAL",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "privilegesRequired": "NONE",
          "scope": "UNCHANGED",
          "userInteraction": "NONE",
          "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H",
          "version": "3.1"
        },
        "exploitabilityScore": 3.9,
        "impactScore": 5.9,
        "source": "nvd@nist.gov",
        "type": "Primary"
      }
    ]
  },
  "published": "2020-07-07T20:15:10.197",
  "references": [
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "larry0@me.com",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit",
        "Third Party Advisory"
      ],
      "url": "http://www.vapidlabs.com/advisory.php?v=213"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Product",
        "Vendor Advisory"
      ],
      "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
    }
  ],
  "sourceIdentifier": "larry0@me.com",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-89"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

CVE-2020-8521 (GCVE-0-2020-8521)

Vulnerability from cvelistv5 – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:45.850Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:19",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8521",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8521",
    "datePublished": "2020-07-07T19:20:21",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:45.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8519 (GCVE-0-2020-8519)

Vulnerability from cvelistv5 – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:18",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8519",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8519",
    "datePublished": "2020-07-07T19:20:20",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:46.105Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8520 (GCVE-0-2020-8520)

Vulnerability from cvelistv5 – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:20",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8520",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8520",
    "datePublished": "2020-07-07T19:20:20",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:46.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8521 (GCVE-0-2020-8521)

Vulnerability from nvd – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:45.850Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:19",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8521",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8521",
    "datePublished": "2020-07-07T19:20:21",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:45.850Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8519 (GCVE-0-2020-8519)

Vulnerability from nvd – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.105Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:18",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8519",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8519",
    "datePublished": "2020-07-07T19:20:20",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:46.105Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

CVE-2020-8520 (GCVE-0-2020-8520)

Vulnerability from nvd – Published: 2020-07-07 19:20 – Updated: 2024-08-04 10:03
VLAI?
Summary
SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql
Severity ?
No CVSS data available.
CWE
  • SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql
Assigner
References
Impacted products
Vendor Product Version
phpzag phpzag live add edit delete data tables records with ajax php mysql Affected: 1.0
Create a notification for this product.
Show details on NVD website
To clipboard 

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-04T10:03:46.177Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.vapidlabs.com/advisory.php?v=213"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
          },
          {
            "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
            "tags": [
              "mailing-list",
              "x_refsource_MLIST",
              "x_transferred"
            ],
            "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "phpzag live add edit delete data tables records with ajax php mysql",
          "vendor": "phpzag",
          "versions": [
            {
              "status": "affected",
              "version": "1.0"
            }
          ]
        }
      ],
      "dateAssigned": "2020-05-19T00:00:00",
      "descriptions": [
        {
          "lang": "en",
          "value": "SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2020-07-09T14:06:20",
        "orgId": "461b2335-328f-427d-ae3d-eff7d6814455",
        "shortName": "larry_cashdollar"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.vapidlabs.com/advisory.php?v=213"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
        },
        {
          "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
          "tags": [
            "mailing-list",
            "x_refsource_MLIST"
          ],
          "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "larry0@me.com",
          "DATE_ASSIGNED": "2020-05-19",
          "ID": "CVE-2020-8520",
          "REQUESTER": "larry0@me.com",
          "STATE": "PUBLIC",
          "UPDATED": "2018-04-08T13:21Z"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "phpzag live add edit delete data tables records with ajax php mysql",
                      "version": {
                        "version_data": [
                          {
                            "version_affected": "=",
                            "version_value": "1.0"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "phpzag"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql"
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.vapidlabs.com/advisory.php?v=213",
              "refsource": "MISC",
              "url": "http://www.vapidlabs.com/advisory.php?v=213"
            },
            {
              "name": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/",
              "refsource": "MISC",
              "url": "https://www.phpzag.com/live-add-edit-delete-datatables-records-with-ajax-php-mysql/"
            },
            {
              "name": "[oss-security] 20200709 SQL Injection in search field of phpzag live add edit delete data tables records with ajax php mysql",
              "refsource": "MLIST",
              "url": "http://www.openwall.com/lists/oss-security/2020/07/09/1"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "461b2335-328f-427d-ae3d-eff7d6814455",
    "assignerShortName": "larry_cashdollar",
    "cveId": "CVE-2020-8520",
    "datePublished": "2020-07-07T19:20:20",
    "dateReserved": "2020-02-03T00:00:00",
    "dateUpdated": "2024-08-04T10:03:46.177Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}