Security Advisory
CVE-2020-21400
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.