high8.8
CVE-2020-21060
SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.
Impact
SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmywind | Phpmywind | Version 5.6 |