CoreCVE

CVE Browser

Search and filter CVEs by severity, ecosystem, EPSS score, and more.

Today 356Last 7 days 3,402Total CVEs 401,083CISA KEV 1,731Critical 42,385 All stats
Clear
More filters (active)
Filters: Vendor: Phpwind Remove filter Clear all

Page 1

CVE-2019-13472 MEDIUM

PHPWind 9.1.0 has XSS vulnerabilities in the c and m parameters of the index.php file.

CVSS 6.1 EPSS 0.85% Jul 9, 2019
CVE-2019-6691 HIGH

phpwind 9.0.2.170426 UTF8 allows SQL Injection via the admin.php?m=backup&c=backup&a=doback tabledb[] parameter, related to the "--backup database" option.

CVSS 7.2 EPSS 1.06% Jan 23, 2019
CVE-2015-4135 MEDIUM

Cross-site scripting (XSS) vulnerability in goto.php in phpwind 8.7 allows remote attackers to inject arbitrary web script or HTML via the url parameter.

CVSS 4.3 EPSS 1.94% May 28, 2015
CVE-2015-4134 MEDIUM

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL…

CVSS 5.8 EPSS 2.07% May 28, 2015
CVE-2006-7101 HIGH

SQL injection vulnerability in admin.php in PHPWind 5.0.1 and earlier allows remote attackers to execute arbitrary SQL commands via the AdminUser cookie.

CVSS 7.5 EPSS 1.04% Mar 3, 2007

Showing 1 to 5 CVEs · page 1