CVE-2020-21060

2023-04-0400:00:00

mitre

www.cve.org

phpmywind

sql injection

remote attacker

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.

References

github.com/gaozhifeng/PHPMyWind/issues/10