EUVD-2019-17825

Malware in sbrugna...

CVE-2020-18230

Cross Site Scripting XSS in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfgswitchshow" of component " /admin/webconfig.php"...

CVE-2020-18229

CVE-2020-18229 affects PHPMyWind v5.5 with a Cross Site Scripting (XSS) vulnerability in the /admin/web_config.php component, where injecting scripts into the parameter $cfg_copyright allows remote attackers to execute arbitrary code. The connected documents consistently describe the flaw as an X...

CVE-2020-18229

Cross Site Scripting XSS in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfgcopyright" of component " /admin/webconfig.php"...

Design/Logic Flaw

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header...

CVE-2019-8435

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header...

CVE-2019-8435

CVE-2019-8435 affects PHPMyWind v5.5, with an XSS vulnerability in admin/default.php exploitable via an HTTP Host header. The connected documents confirm the vulnerability and describe the impact as cross-site scripting, enabling arbitrary script/HTML injection when a crafted Host header is proce...