CVE-2020-23685

2021-11-0218:15:08

Google

osv.dev

8.8 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

JSON

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.

CPENameOperatorVersion
188jianzhaneq2.10

CPE	Name	Operator	Version
	188jianzhan	eq	2.10

References

github.com/vtime-tech/188Jianzhan/issues/2