CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function...

CVE-2020-21400

CVE-2020-21400 concerns a SQL injection in the PHPMyWind 5.6 web app by gaozhifeng . The vulnerability affects the modify function where an attacker can manipulate the id variable to execute arbitrary code on the server. This is documented across multiple connected sources as a remote, network-ex...

CVE-2020-21060

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

CVE-2020-21060

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

Sql injection

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

PHPMyWind SQL injection vulnerability

PHPMyWind is an enterprise website building solution based on PHP and MySQL and compliant with W3C standards. A security vulnerability exists in PHPMyWind version v.5.6. A remote attacker can exploit this vulnerability to gain privileges via the delete function on the administrator management pag...

CVE-2020-21060

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

CVE-2020-21060

PHPMyWind 5.6 is affected by a SQL injection vulnerability in the administrator management page’s delete function, allowing remote attackers with low privileges to gain elevated access. Root cause: improper input handling in the delete operation enables arbitrary SQL execution, leading to potenti...

CVE-2020-21060

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

CVE-2020-21060: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page...

PT-2023-11574 · Phpmywind · Phpmywind

Name of the Vulnerable Software and Affected Versions: PHPMyWind version 5.6 Description: A SQL injection issue allows a remote attacker to gain privileges via the delete function of the administrator management page. Recommendations: For PHPMyWind version 5.6, update to a version that includes a...

PHPMyWind Cross-Site Request Forgery Vulnerability

PHPMyWind is a W3C-compliant website building engine developed on PHP MySQL. PHPMyWind version 5.6 is vulnerable to cross-site request forgery. An attacker can use this vulnerability to create a new administrator account without authentication...

CVE-2020-19964

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

CVE-2020-19964

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

CVE-2020-19964

CVE-2020-19964 concerns a CSRF vulnerability in PHPMyWind 5.6. The vulnerability allows an unauthenticated attacker to create a new administrator account, representing a potential elevation of privileges risk for affected deployments. The available connected sources consistently describe the flaw...

CVE-2020-19964

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

PT-2021-10429

Name of the Vulnerable Software and Affected Versions: PHPMyWind version 5.6 Description: A Cross Site Request Forgery CSRF issue was discovered, allowing attackers to create a new administrator account without authentication. Recommendations: For PHPMyWind version 5.6, consider temporarily...