Command injection

2021-08-2014:15:00

PRIOn knowledge base

www.prio-n.com

7.6 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

55.3%

JSON

Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the “text color” field of the component ‘/admin/web_config.php’.

CPENameOperatorVersion
phpmywindeq5.6

CPE	Name	Operator	Version
	phpmywind	eq	5.6

References

cwe.mitre.org/data/definitions/77.html

github.com/gaozhifeng/PHPMyWind/issues/4