Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-64090
HistoryJun 28, 2023 - 12:00 a.m.

PHPMyWind SQL Injection Vulnerability (CNVD-2023-64090)

2023-06-2800:00:00
China National Vulnerability Database
www.cnvd.org.cn
22
phpmywind
sql injection
remote attackers
arbitrary code
modify function
cnvd-2023-64090

EPSS

0.001

Percentile

47.2%

PHPMyWind is a set of PHP and MySQL-based and W3C-compliant enterprise website building solutions. A SQL injection vulnerability exists in PHPMyWind v.5.6, which can be exploited by remote attackers to execute arbitrary code via the id variable in the modify function.

EPSS

0.001

Percentile

47.2%

Related for CNVD-2023-64090