CVE-2020-21400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400

CVE-2020-21400 concerns a SQL injection in the PHPMyWind 5.6 web app by gaozhifeng . The vulnerability affects the modify function where an attacker can manipulate the id variable to execute arbitrary code on the server. This is documented across multiple connected sources as a remote, network-ex...

CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

PT-2023-11584

Name of the Vulnerable Software and Affected Versions gaozhifeng PHPMyWind version 5.6 Description The issue allows a remote attacker to execute arbitrary code via the id variable in the modify function. This is a SQL injection vulnerability. Recommendations For gaozhifeng PHPMyWind version 5.6, ...