2 matches found
Cross site request forgery (csrf)
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
4.3CVSS5.9AI score0.00436EPSS
SaveExploits1References1Affected Software1
CVE-2019-7402: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
6.1CVSS5.8AI score0.00436EPSS
SaveExploits1References3
20