CVE-2018-11487

CVE-2018-11487 affects PHPMyWind 5.5 with reflected Cross-Site Scripting (XSS) via the cid parameter to newsshow.php or via a query string to news.php or about.php. The vulnerability allows an attacker to inject and execute script in a victim’s browser when the affected pages are loaded. Root cau...

CVE-2018-11487: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or about.php...

PT-2018-10604

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the cid parameter to the "newsshow.php" endpoint, or the query string to the "news.php" or "about.php...

Code Execution Vulnerability in PHPMyWind v5.4

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A code execution vulnerability exists in PHPMyWind v5.4. PHPMyWind can be exploited to execute arbitrary code when implementing the generation of cache configuration files...

SQL Injection Vulnerability in PHPMyWind member.php File

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A SQL injection vulnerability exists in the PHPMyWind member.php file. The vulnerability is due to the $sql variable being passed in directly by a parameter, allowing an attacker to exploit the vulnerability to obtain...

SQL Injection Vulnerability in PHPMyWind

HPMyWind is a PHP + MySQL based development of W3C standards-compliant site building engine . PHPMyWind has a SQL injection vulnerability that can be exploited by attackers to access or modify database data...

Arbitrary Password Reset Vulnerability in PHPMyWind v5.4

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . An arbitrary password reset vulnerability exists in PHPMyWind v5.4. An attacker can exploit this vulnerability to reset a user's password...

phpmywind background arbitrary file deletion

No description provided by source...

PHPMyWind shoppingcart.php file cross-site scripting vulnerability

PHPMyWind is a set of PHP and MySQL-based, W3C-compliant enterprise website building solutions. A cross-site scripting vulnerability exists in the PHPMyWind shoppingcart.php file, which allows remote attackers to exploit the vulnerability to inject malicious script or HTML code, which can be used...

SQL Injection Vulnerability in PHPMyWind sysevent.php File

PHPMyWind is a PHP MySQL-based development , W3C-compliant building engine . A SQL injection vulnerability exists in the PHPMyWind sysevent.php file. The vulnerability is due to the system siteid parameter does not filter the data submitted by the user, a remote attacker can exploit the...

CVE-2017-12984

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...

Design/Logic Flaw

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...

CVE-2017-12984

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...

CVE-2017-12984

PHPMyWind 5.3 is affected by a cross-site scripting (XSS) vulnerability in shoppingcart.php, with related exposure through message.php and admin/message*. The CVE-2017-12984 entry confirms XSS in shoppingcart.php and references associated files (message.php, admin/message.php, admin/message_updat...

CVE-2017-12984

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...

PT-2017-12823

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.3 Description The issue is related to a problem in the shoppingcart.php file, which is also connected to message.php, admin/message.php, and admin/message update.php. This problem allows for XSS. Recommendations For PHPMyWi...

PHPMyWind 5.3 - Cross-Site Scripting Vulnerability

Exploit for php platform in category web applications Exploit Title：PHPMyWind 5.3 has XSS Vendor Homepage:http://phpmywind.com Software Link:http://phpmywind.com/downloads/PHPMyWind5.3.zip Version:5.3 CVE:CVE-2017-12984 $r= $dosql-GetOne"SELECT Maxorderid AS orderid FROM @message"; $orderid=...

PHPMyWind 5.3 Cross Site Scripting

Exploit Titlei1/4PHPMyWind 5.3 has XSS Exploit Author:adege" Vendor Homepage:http://phpmywind.com Software Link:http://phpmywind.com/downloads/PHPMyWind5.3.zip Version:5.3 CVE:CVE-2017-12984 $r= $dosql-GetOne"SELECT Maxorderid AS orderid FROM @message"; $orderid= empty$r'orderid' ? 1 : $r'orderid...

PHPMyWind 5.3 - Cross-Site Scripting

PHPMyWind 5.3 - Cross-Site Scripting Exploit Title：PHPMyWind 5.3 has XSS Exploit Author:小雨 Vendor Homepage:http://phpmywind.com Software Link:http://phpmywind.com/downloads/PHPMyWind5.3.zip Version:5.3 CVE:CVE-2017-12984 $r= $dosql-GetOne"SELECT Maxorderid AS orderid FROM @message"; $orderid=...

CVE-2017-12984: Improper Neutralization of Input During Web Page Generation

PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...