Phpmywind vulnerabilities

Products

• Phpmywind 22

Newest

• phpmywind SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute... CVE-2020-21400 7.2 HighJune 20, 2023
• phpmywind SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges... CVE-2020-21060 8.8 HighApril 4, 2023
• phpmywind A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows... CVE-2020-19964 6.5 MediumOctober 14, 2021
• phpmywind PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, ... CVE-2021-39503 7.2 HighSeptember 7, 2021
• phpmywind Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via... CVE-2020-18886 7.2 HighAugust 20, 2021
• phpmywind Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the ... CVE-2020-18885 7.2 HighAugust 20, 2021
• phpmywind Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by... CVE-2020-18229 4.8 MediumMay 27, 2021
• phpmywind Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by... CVE-2020-18230 4.8 MediumMay 27, 2021
• phpmywind admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. CVE-2019-16704 4.8 MediumSeptember 23, 2019
• phpmywind admin/infolist_add.php in PHPMyWind 5.6 has stored XSS. CVE-2019-16703 6.1 MediumSeptember 23, 2019
• phpmywind An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php... CVE-2019-7661 6.1 MediumMarch 7, 2019
• phpmywind An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page... CVE-2019-7660 6.1 MediumMarch 7, 2019
• phpmywind admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. CVE-2019-8435 4.8 MediumFebruary 18, 2019
• phpmywind An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders... CVE-2019-7403 4.9 MediumFebruary 5, 2019
• phpmywind An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS... CVE-2019-7402 6.1 MediumFebruary 5, 2019
• phpmywind admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the... CVE-2018-17134 7.2 HighSeptember 17, 2018
• phpmywind admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the... CVE-2018-17133 7.2 HighSeptember 17, 2018
• phpmywind admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the... CVE-2018-17132 7.2 HighSeptember 17, 2018
• phpmywind admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the... CVE-2018-17131 7.2 HighSeptember 17, 2018
• phpmywind PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header, CVE-2018-17130 5.4 MediumSeptember 17, 2018
• phpmywind PHPMyWind 5.5 has XSS via the cid parameter to newsshow.php, or the query string to news.php or... CVE-2018-11487 6.1 MediumMay 26, 2018
• phpmywind PHPMyWind 5.3 has XSS in shoppingcart.php, related to message.php, admin/message.php, and admin... CVE-2017-12984 Public exploit 6.1 MediumAugust 21, 2017