CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 07/09/2021 |
| CVE-2020-18886 | 높음7.2 | Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'. | 20/08/2021 |
| CVE-2020-18885 | 높음7.2 | Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'. | 20/08/2021 |
| CVE-2020-18230 | 보통4.8 | Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_switchshow" of component " /admin/web_config.php". | 27/05/2021 |
| CVE-2020-18229 | 보통4.8 | Cross Site Scripting (XSS) in PHPMyWind v5.5 allows remote attackers to execute arbitrary code by injecting scripts into the parameter "$cfg_copyright" of component " /admin/web_config.php". | 27/05/2021 |
| CVE-2019-16704 | 보통4.8 | admin/infoclass_update.php in PHPMyWind 5.6 has stored XSS. | 23/09/2019 |
| CVE-2019-16703 | 보통6.1 | admin/infolist_add.php in PHPMyWind 5.6 has stored XSS. | 23/09/2019 |
| CVE-2019-7661 | 보통6.1 | An issue was discovered in PHPMyWind 5.5. The method parameter of the data/api/oauth/connect.php page has a reflected Cross-site Scripting (XSS) vulnerability. | 07/03/2019 |
| CVE-2019-7660 | 보통6.1 | An issue was discovered in PHPMyWind 5.5. The username parameter of the /install/index.php page has a stored Cross-site Scripting (XSS) vulnerability, as demonstrated by admin/login.php. | 07/03/2019 |
| CVE-2019-8435 | 보통4.8 | admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header. | 18/02/2019 |
| CVE-2019-7403 | 보통4.9 | An issue was discovered in PHPMyWind 5.5. It allows remote attackers to delete arbitrary folders via an admin/database_backup.php?action=import&dopost=deldir&tbname=../ URI. | 05/02/2019 |
| CVE-2019-7402 | 보통6.1 | An issue was discovered in PHPMyWind 5.5. The GetQQ function in include/func.class.php allows XSS via the cfg_qqcode parameter. This can be exploited via CSRF. | 05/02/2019 |
| CVE-2018-17134 | 높음7.2 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field. | 17/09/2018 |
| CVE-2018-17133 | 높음7.2 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the rewrite url setting. | 17/09/2018 |
| CVE-2018-17132 | 높음7.2 | admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter. | 17/09/2018 |
| CVE-2018-17131 | 높음7.2 | admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field. | 17/09/2018 |
| CVE-2018-17130 | 보통5.4 | PHPMyWind 5.5 has XSS in member.php via an HTTP Referer header, | 17/09/2018 |