CVE-2020-23685

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Nov 2, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2020

CVE-2020-236868.8Cross site request forgery (CSRF) vulnerability in AyaCMS 3.1.2 allows attackers to change an administrators password or other unspecified i CVE-2020-236894.8In YFCMF v2.3.1, there is a stored XSS vulnerability in the comments section of the news page.CVE-2020-236919.8YFCMF v2.3.1 has a Remote Command Execution (RCE) vulnerability in the index.php.CVE-2020-236975.4Cross Site Scripting vulnerabilty in Monstra CMS 3.0.4 via the page feature in admin/index.php.CVE-2020-237004.8Cross Site Scripting (XSS) vulnerability in LavaLite-CMS 5.8.0 via the Menu Links feature.CVE-2020-237024.8Cross Site Scripting (XSS) vulnerability in PHP-Fusion 9.03.60 via 'New Shout' in /infusions/shoutbox_panel/shoutbox_admin.php.CVE-2020-237056.5A global buffer overflow vulnerability in jfif_encode at jfif.c:701 of ffjpeg through 2020-06-22 allows attackers to cause a Denial of Servi CVE-2020-237066.5A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_subsequent_scan() ok_jpg.c:1102 of ok-file-formats through 20 CVE-2020-237076.5A heap-based buffer overflow vulnerability in the function ok_jpg_decode_block_progressive() at ok_jpg.c:1054 of ok-file-formats through 202 CVE-2020-237105.4Cross Site Scripting (XSS) vulneraiblity in LimeSurvey 4.2.5 on textbox via the Notifications & data feature.CVE-2020-237119.8SQL Injection vulnerability in NavigateCMS 2.9 via the URL encoded GET input category in navigate.php.CVE-2020-237158.6Directory Traversal vulnerability in Webport CMS 1.19.10.17121 via the file parameter to file/download.