CVE-2020-24877: SQL Injection
Published Mar 15, 2021
·Updated
A SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson may lead to a possible access restriction bypass.
Affected Software
1 affected component
ZZZCMS zzzphp=1.8.0
Event History
Mar 15, 2021
CVE Published
via MITRE·04:41 PM
Data Sourced
via MITRE·04:41 PM
Description
Frequently Asked Questions
1
What is CVE-2020-24877?
CVE-2020-24877 is a SQL injection vulnerability in zzzphp v1.8.0 through /form/index.php?module=getjson that may lead to a possible access restriction bypass.
2
How severe is CVE-2020-24877?
CVE-2020-24877 has a severity rating of 9.8 (critical).
3
How can I fix CVE-2020-24877?
To fix CVE-2020-24877, update zzzphp to a version that is not affected (v1.8.0 or later).
4
What is the affected software version of CVE-2020-24877?
CVE-2020-24877 affects zzzphp version 1.8.0.
5
Is there any additional information about CVE-2020-24877?
Yes, you can find more information about CVE-2020-24877 at the following reference: [link](https://github.com/h4ckdepy/zzzphp/issues/1).