Stivasoft Fundraising Script SQL Injection (CVE-2020-22223; CVE-2020-22225; CVE-2020-22226)

An SQL injection vulnerability exists in Stivasoft Fundraising Script. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-22225

Stivasoft Phpjabbers Fundraising Script v1.0 was discovered to contain a SQL injection vulnerability via the pjActionLoadForm function...

CVE-2020-22225

The CVE-2020-22225 issue concerns Stivasoft (Phpjabbers) Fundraising Script v1.0, where a SQL injection vulnerability exists in the pjActionLoadForm function. This is the underlying root cause: input handling in pjActionLoadForm allows arbitrary SQL to be executed by an unauthenticated or remote ...