7 matches found
Cross site request forgery (csrf)
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
CVE-2019-7402
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
CVE-2019-7402
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
CVE-2019-7402
The vulnerability CVE-2019-7402 affects PHPMyWind 5.5, where the GetQQ function in include/func.class.php allows XSS via the cfg_qqcode parameter. The issue can be exploited through CSRF. Connected sources (Red Hat) corroborate the same description. No specific vulnerable versions beyond 5.5 are ...
CVE-2019-7402
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...
PT-2019-18583
Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description An issue was discovered that allows XSS via the cfg qqcode parameter in the GetQQ function, which can be exploited via CSRF. Recommendations For PHPMyWind version 5.5, consider disabling the GetQQ function in...
CVE-2019-7402: Improper Neutralization of Input During Web Page Generation
An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfgqqcode parameter. This can be exploited via CSRF...