Description
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
Unscored
CVE-2021-39503
EUVD-2021-25860GHSA-mx24-fhg2-2xq8
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an a…
Published Sep 7, 2021 · Updated Aug 4, 2024 · Assigned by mitre