CVE-2020-19964

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2021-10-14

Last modified

2026-07-09

Weaknesses

CWE-352

Affected products

• Phpmywind (Phpmywind)

References

• https://github.com/gaozhifeng/PHPMyWind
• https://github.com/gaozhifeng/PHPMyWind/issues/9