CVE-2020-21400

Published
View on NVD ↗
CVSS v3
7.2
HIGH
CVSS v2
N/A
Affected
1
PROJECT

Description

SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.

PHPMyWind是一个品牌,一款基于PHP+MySQL开发符合W3C标准的建站引擎 © 2010 - 2017
GitHubGitHub
59