TI-2019-10114 CVE-2019-13472 · GHSA-pm5p-j5fj-r79c
PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.
Priority LOW 29
PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.
Vulnerabilities
5 records
TI-2019-04741 CVE-2019-6691 · GHSA-g99f-9q6f-g5wr
phpwind 9.0.2.170426 UTF8 allows SQL Injection via the…
Priority LOW 34
phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.
TI-2015-03466 CVE-2015-4135 · GHSA-6393-w7fp-pc5g
Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote…
Priority LOW 24
Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter.
TI-2015-03465 CVE-2015-4134 · GHSA-cr45-v5gw-mw3r
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to…
Priority LOW 30
Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.
TI-2006-06842 CVE-2006-7101 · GHSA-c3xm-ch6c-3q86
SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote…
Priority LOW 35
SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the AdminUser cookie.