high7.2
CVE-2021-39503
PHPMyWind 5.6 is vulnerable to Remote Code Execution.
Impact
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpmywind | Phpmywind | Version 5.6 |