CVE-2020-23685

PoC —

CVSS 3.1

9.8 critical

EPSS

2%p75

Published

Nov 2, 2021 (Nov 2, 2021)

Modified

Jun 17, 2026

Description

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.

Vendors: vtimecn
Products: 188jianzhan
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.6%)

In the news0 stories

No ingested article mentions this CVE yet.