phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.
References
Link | Resource |
---|---|
https://github.com/Veeeooo/phpwind/blob/master/README.md | Exploit Third Party Advisory |
Configurations
Information
Published : 2019-01-23 01:29
Updated : 2019-01-25 08:54
NVD link : CVE-2019-6691
Mitre link : CVE-2019-6691
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
phpwind
- phpwind