high7.2
CVE-2020-21400
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
Impact
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmywind | Phpmywind | Version 5.6 |