Lucene search
HistoryJun 20, 2023 - 3:15 p.m.
CVE-2020-21400
vulnerability
sql injection
gaozhifeng_phpmywind
remote attacker
arbitrary code
modify function
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
47.2%
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
Affected configurations
Node
phpmywindphpmywindMatch5.6
Related
prion
prion
Sql injection
2023-06-20 15:15:00
cnvd
cnvd
PHPMyWind SQL Injection Vulnerability (CNVD-2023-64090)
2023-06-28 00:00:00
cve
cve
CVE-2020-21400
2023-06-20 15:15:11
cvelist
cvelist
CVE-2020-21400
2023-06-20 00:00:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
AI Score
7.4
Confidence
High
EPSS
0.001
Percentile
47.2%
Related for NVD:CVE-2020-21400