CVE-2019-7403

An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=../ URI.

Score

CVSS 3.0 4.9 Medium

Status

Modified - cve@mitre.org

Published

2019-02-05

Last modified

2024-09-17

Weaknesses

CWE-22

Affected products

• Phpmywind (Phpmywind)

References

• https://github.com/panghusec/exploit/issues/9