Phpzag SQL Injection (CVE-2020-8519; CVE-2020-8520; CVE-2020-8521)

An SQL injection vulnerability exists in Phpzag. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary SQL commands on the affected system...

CVE-2020-8521

CVE-2020-8521 describes an SQL injection in Phpzag’s DataTables Records.php (used for live add/edit/delete of records via Ajax). The vulnerability stems from unsafe handling of the start and length parameters in Records.php, enabling an attacker to manipulate SQL queries. Multiple sources (NVD, R...