CVE-2020-24877

creationtimestamp| type| source ---|---|--- 2021-03-15 19:29:01+00:00| seen| https://t.me/cibsecurity/24900 2021-09-21 06:42:55+00:00| published-proof-of-concept| https://t.me/pwnwikizhchannel/21...

CVE-2020-24877

A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass...

CVE-2020-24877

CVE-2020-24877 describes a SQL injection in zzzphp v1.8.0 via /form/index.php?module=getjson, causing an access restriction bypass. Multiple connected sources confirm the vulnerable component and the root cause: insufficient validation/escaping of external input in SQL statements. Reported impact...