| Package | Affected versions | Patched versions |
|---|---|---|
| phpmywind | = 5.6 |
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free