PatchTheCVEphpzag vulnerabilities
Recent CVEs affecting phpzag products. 3 tracked.
phpzag has 3 tracked vulnerabilities, 3 critical. A fixed release or vendor patch exists for 0. Most recent: 2020-07-07. Highest priority: CVE-2020-8521 (score 62/100).
- CVE-2020-8521 CRITICAL 9.8 MITIGATE SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables reco
- CVE-2020-8520 CRITICAL 9.8 MITIGATE SQL injection in order and column parameters in Records.php for phpzag live add edit delete data tables record
- CVE-2020-8519 CRITICAL 9.8 MITIGATE SQL injection with the search parameter in Records.php for phpzag live add edit delete data tables records wit
FAQ
How do I fix phpzag vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpzag being exploited right now?
None of the tracked phpzag CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpzag CVE should I patch first?
CVE-2020-8521 currently ranks highest (62/100): SQL injection with start and length parameters in Records.php for phpzag live add edit delete data tables reco.