CVE-2020-19964

MediumCVSS 6.5

Published: 14/10/2021(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.50%

39th percentile - higher than 39% of all known CVEs

Summary

A Cross-Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6, allowing attackers to create a new administrator account without authentication.

Risk Assessment

An attacker can exploit this vulnerability to gain control over the system by creating an unauthorized administrator account, leading to full compromise of the application.

Recommendation

Immediately update PHPMyWind to the latest available version and implement CSRF protection mechanisms such as anti-CSRF tokens.

Original NVD description (English source)

A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.