CVE-2020-18885

Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/webconfig.php'...

CVE-2020-18885

CVE-2020-18885 affects PHPMyWind v5.6, with a command injection vulnerability in the admin/web_config.php component that allows remote attackers to execute arbitrary code via the text color field. Multiple connected sources corroborate the flaw and its impact on remote code execution. Public deta...