CVE-2019-7403

2019-02-0516:00:00

mitre

www.cve.org

phpmywind

remote attack

folder deletion

AI Score

5.3

Confidence

High

EPSS

0.001

Percentile

43.7%

JSON

An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=…/ URI.

References

github.com/panghusec/exploit/issues/9