CVE-2019-16703

admin/infolistadd.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16704

admin/infoclassupdate.php in PHPMyWind 5.6 has stored XSS...

EUVD-2019-7254

Malware in sbrugna...

CVE-2020-19964

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

Cross site request forgery (csrf)

A Cross Site Request Forgery CSRF vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication...

CVE-2020-19964

CVE-2020-19964 concerns a CSRF vulnerability in PHPMyWind 5.6. The vulnerability allows an unauthenticated attacker to create a new administrator account, representing a potential elevation of privileges risk for affected deployments. The available connected sources consistently describe the flaw...

Remote code execution

PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without ", ?, =, ,...." In WriteConfig function, an attacker can inject php code to /include/config.cache.php file...

CVE-2019-16704

admin/infoclassupdate.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16704

admin/infoclassupdate.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16703

admin/infolistadd.php in PHPMyWind 5.6 has stored XSS...

Cross site scripting

admin/infolistadd.php in PHPMyWind 5.6 has stored XSS...

Cross site scripting

admin/infoclassupdate.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16704

admin/infoclassupdate.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16703

admin/infolistadd.php in PHPMyWind 5.6 has stored XSS...

CVE-2019-16703

CVE-2019-16703 affects PHPMyWind 5.6, where the vulnerability is a stored cross-site scripting flaw in the admin/infolist_add.php file. The root cause is insufficient validation of client-side data, allowing an attacker to inject and execute arbitrary script when the page is accessed or when data...