Unscored CVE-2020-23685 EUVD-2020-16427GHSA-gh9j-7p27-cg45

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the userna…

Published Nov 2, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.

References

https://github.com/vtime-tech/188Jianzhan/issues/2