📦 Phpmywind

This SQL injection vulnerability in PHPMyWind v5.6 allows remote attackers to execute arbitrary SQL commands via the 'id' parameter in the modify function. Attackers can potentially read, modify, or d...

CVE-2021-39503 is a remote code execution vulnerability in PHPMyWind 5.6 that allows attackers to inject PHP code into configuration files due to insufficient input filtering. This affects all users r...

This vulnerability allows remote attackers to upload arbitrary files to PHPMyWind v5.6 systems via the admin/upload_file_do.php component. Attackers can execute arbitrary code on the server by uploadi...