PT-2021-10160

Name of the Vulnerable Software and Affected Versions: PHPMyWind version 5.5 Description: The issue allows remote attackers to execute arbitrary code through Cross Site Scripting XSS by injecting scripts into the cfg switchshow parameter of the /admin/web config.php component. Recommendations: Fo...

PT-2021-10159

Name of the Vulnerable Software and Affected Versions: PHPMyWind version 5.5 Description: The issue allows remote attackers to execute arbitrary code through Cross Site Scripting XSS by injecting scripts into the cfg copyright parameter of the /admin/web config.php component. Recommendations: For...

PT-2018-13912

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue allows admin users to execute arbitrary code via the varvalue field in the admin/web config.php file. Recommendations For PHPMyWind version 5.5, restrict access to the admin/web config.php file to...

PT-2018-13914

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue allows admin users to execute arbitrary code via the rewrite url setting in the admin/web config.php file. Recommendations For PHPMyWind version 5.5, restrict access to the admin/web config.php file...