← Database

CVE-2021-39503

HIGH CVSS: 7.2 Published: 2021-09-07 Modified: 2026-06-17

Description

PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.

Affected Platforms

Phpmywind Phpmywind

Weakness Type

CWE-94

References