Phpwind

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Phpwind records in CISA KEV

No Phpwind vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Phpwind 5 records LOW

Records

5 records in Phpwind · all components

TI-2006-06842 CVE-2006-7101 · GHSA-c3xm-ch6c-3q86

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote…

LOW 35

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the AdminUser cookie.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01045 Published 2007-03-03 No fix listed

TI-2019-04741 CVE-2019-6691 · GHSA-g99f-9q6f-g5wr

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the…

LOW 34

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.

CVSS 3.0HIGH 7.2 Network High privileges No interaction EPSS 0.01059 Published 2019-01-23 No fix listed CWE-89

TI-2015-03465 CVE-2015-4134 · GHSA-cr45-v5gw-mw3r

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to…

LOW 30

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

CVSS 2.0MEDIUM 5.8 Network No auth Interaction — EPSS 0.02058 Published 2015-05-28 No fix listed

TI-2019-10114 CVE-2019-13472 · GHSA-pm5p-j5fj-r79c

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.

LOW 29

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00848 Published 2019-07-09 No fix listed CWE-79

TI-2015-03466 CVE-2015-4135 · GHSA-6393-w7fp-pc5g

Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01936 Published 2015-05-28 No fix listed CWE-79

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0