high7.2
CVE-2018-17132
admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.
Impact
admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmywind | Phpmywind | Version 5.5 |