6 matches found
Design/Logic Flaw
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
CVE-2017-12984
PHPMyWind 5.3 is affected by a cross-site scripting (XSS) vulnerability in shoppingcart.php, with related exposure through message.php and admin/message*. The CVE-2017-12984 entry confirms XSS in shoppingcart.php and references associated files (message.php, admin/message.php, admin/message_updat...
CVE-2017-12984: Improper Neutralization of Input During Web Page Generation
PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin/messageupdate.php...
PT-2017-12823
Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.3 Description The issue is related to a problem in the shoppingcart.php file, which is also connected to message.php, admin/message.php, and admin/message update.php. This problem allows for XSS. Recommendations For PHPMyWi...