Sql injection

2023-04-0415:15:00

PRIOn knowledge base

www.prio-n.com

sql injection

phpmywind v.5.6

remote attacker

privileges

delete function

administrator management page

nvd

9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.1%

JSON

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.

CPENameOperatorVersion
phpmywindeq5.6

CPE	Name	Operator	Version
	phpmywind	eq	5.6

References

github.com/gaozhifeng/PHPMyWind/issues/10