CVE-2020-23685

CRITICAL 9.8CVE-2020-23685 · Published 02/11/2021 · updated 17/06/2026

In short

CVE-2020-23685 is a CRITICAL (CVSS 9.8) vulnerability affecting 188jianzhan (vtimecn).
Chance of exploitation in the next 30 days (EPSS): 1.6%, higher than 76.2% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
188jianzhan vtimecn	`= 2.10`	No fix yet

Description

SQL Injection vulnerability in 188Jianzhan v2.1.0, allows attackers to execute arbitrary code and gain escalated privileges, via the username parameter to login.php.

References

vtime-tech/188Jianzhan · Exploit

More vulnerabilities in 188jianzhan

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free