An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=../ URI.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-7403
Reference (s):
- https://github.com/panghusec/exploit/issues/9