CVE-2020-21060

2023-04-0400:00:00

mitre

www.cve.org

phpmywind

sql injection

remote attacker

AI Score

9.1

Confidence

High

EPSS

0.001

Percentile

44.0%

JSON

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.

References

github.com/gaozhifeng/PHPMyWind/issues/10