CVE-2020-24877: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass...

PT-2021-11077

Name of the Vulnerable Software and Affected Versions: zzzphp version 1.8.0 Description: A SQL injection issue may lead to a possible access restriction bypass. The /form/index.php?module=getjson endpoint is affected. Recommendations: For zzzphp version 1.8.0, consider restricting access to the...