4 matches found
Code injection
admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting...
6.5CVSS7.3AI score0.02107EPSS
SaveExploits1References1Affected Software1
CVE-2018-17133
admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting...
7.3AI score0.02107EPSS
SaveExploits1References1
CVE-2018-17133: Improper Control of Generation of Code
admin/webconfig.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting...
7.2CVSS7.7AI score0.02107EPSS
SaveExploits1References2
PT-2018-13914
Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5 Description The issue allows admin users to execute arbitrary code via the rewrite url setting in the admin/web config.php file. Recommendations For PHPMyWind version 5.5, restrict access to the admin/web config.php file...
7.2CVSS0.02107EPSS
SaveExploits1References3
20