CVE-2020-8519

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Jul 7, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-85209.8SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysqlCVE-2020-85219.8SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysqlCVE-2020-85397.8Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unautCVE-2020-85409.8An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated CVE-2020-85416.5OX App Suite through 7.10.3 allows XXE attacks.CVE-2020-85425.4OX App Suite through 7.10.3 allows XSS.CVE-2020-85437.5OX App Suite through 7.10.3 has Improper Input Validation.CVE-2020-85446.5OX App Suite through 7.10.3 allows SSRF.CVE-2020-85457.5Global.py in AIL framework 2.8 allows path traversal.CVE-2020-85479.8phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes thaCVE-2020-85486.1massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferencesCVE-2020-85496.1Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as stea
CVE-2020-8519: Critical severity, CVSS 9.8 | Vulnix