CVE-2017-12984

Description

References

• yuag.org/2016/08/17/phpmywind_5-3%E5%AD%98%E5%82%A8%E5%9E%8Bxss · Third Party Advisory
• exploit-db.com/exploits/42535

Altre vulnerabilità di phpmywind

• CVE-2020-21400ALTO 7.2SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modi…
• CVE-2020-21060ALTO 8.8SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrato…
• CVE-2020-19964MEDIO 6.5A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator accou…
• CVE-2021-39503ALTO 7.2PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an at…
• CVE-2020-18886ALTO 7.2Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'.