Export limit exceeded: 425866 CVEs match your query. Please refine your search to export 10,000 CVEs or fewer.

Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 5

Export CSV
CVE-2006-7101

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the AdminUser cookie.

CVSS 2.0 · 7.5 High EPSS 1.0% KEV · Not listed
Vendors
Phpwind
Products
Phpwind
CVE-2015-4134

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

CVSS 2.0 · 5.8 Medium EPSS 2.1% KEV · Not listed
Vendors
Phpwind
Products
Phpwind
CVE-2015-4135

Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVSS 2.0 · 4.3 Medium EPSS 1.9% KEV · Not listed
Vendors
Phpwind
Products
Phpwind
CVE-2019-6691

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.

CVSS 3.0 · 7.2 High EPSS 1.1% KEV · Not listed
Vendors
Phpwind
Products
Phpwind
CVE-2019-13472

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.

CVSS 3.0 · 6.1 Medium EPSS < 1% KEV · Not listed
Vendors
Phpwind
Products
Phpwind