CVE-2020-8521

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables records with ajax php mysql

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

VendorProductVersions
phpzagphpzag live add edit delete data tables records with ajax php mysql1.0

References

Timeline

Published
Jul 7, 2020
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2020

CVE-2020-85397.8Kia Motors Head Unit with Software version: SOP.003.30.18.0703, SOP.005.7.181019, and SOP.007.1.191209 may allow an attacker to inject unautCVE-2020-85409.8An XML external entity (XXE) vulnerability in Zoho ManageEngine Desktop Central before the 07-Mar-2020 update allows remote unauthenticated CVE-2020-85416.5OX App Suite through 7.10.3 allows XXE attacks.CVE-2020-85425.4OX App Suite through 7.10.3 allows XSS.CVE-2020-85437.5OX App Suite through 7.10.3 has Improper Input Validation.CVE-2020-85446.5OX App Suite through 7.10.3 allows SSRF.CVE-2020-85457.5Global.py in AIL framework 2.8 allows path traversal.CVE-2020-85479.8phpList 3.5.0 allows type juggling for admin login bypass because == is used instead of === for password hashes, which mishandles hashes thaCVE-2020-85486.1massCode 1.0.0-alpha.6 allows XSS via crafted Markdown text, with resultant remote code execution (because nodeIntegration in webPreferencesCVE-2020-85496.1Stored XSS in the Strong Testimonials plugin before 2.40.1 for WordPress can result in an attacker performing malicious actions such as steaCVE-2020-85516.5The Kubelet component in versions 1.15.0-1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denial of service attCVE-2020-85524.3The Kubernetes API server component in versions prior to 1.15.9, 1.16.0-1.16.6, and 1.17.0-1.17.2 has been found to be vulnerable to a denia
CVE-2020-8521: Critical severity, CVSS 9.8 | Vulnix