CVE-2020-21400

2023-06-2000:00:00

mitre

www.cve.org

sql injection

phpmywind

remote code execution

id variable

AI Score

7.4

Confidence

High

EPSS

0.001

Percentile

47.2%

JSON

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.

References

github.com/gaozhifeng/PHPMyWind/issues/11