PHPMyWind 5.6
Approved changes feed: RSS · Atom
cpe:2.3:a:phpmywind:phpmywind:5.6:*:*:*:*:*:*:*part: a version: 5.6 update: *
| Vendor | Phpmywind (46eaa147-d040-5ad2-a66e-1c38dcc43296) |
|---|---|
| Product | Phpmywind (baeaba1a-8bc1-5891-92ed-3014916ef24b) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/forget-code/phpmywind |
purl2cpe | 2026-06-01 10:12:08.162793 |
pkg:github/gaozhifeng/phpmywind |
purl2cpe | 2026-06-01 10:12:08.162794 |
pkg:sourceforge/readpmw |
purl2cpe | 2026-06-01 10:12:08.162795 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2021-39503 |
vulnerable | 2026-06-08 05:33:50.224092 |
Details available
PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,...." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.
Published: 2021-09-07T19:51:23.000Z
Updated: 2024-08-04T02:06:42.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21400 |
vulnerable | 2026-06-08 05:22:30.802455 |
Details available
SQL injection vulnerability in gaozhifeng PHPMyWind v.5.6 allows a remote attacker to execute arbitrary code via the id variable in the modify function.
Published: 2023-06-20T00:00:00.000Z
Updated: 2024-12-10T15:44:32.405Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-21060 |
vulnerable | 2026-06-08 05:22:30.685320 |
Details available
SQL injection vulnerability found in PHPMyWind v.5.6 allows a remote attacker to gain privileges via the delete function of the administrator management page.
Published: 2023-04-04T00:00:00.000Z
Updated: 2025-02-13T16:37:48.823Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-19964 |
vulnerable | 2026-06-08 05:20:57.497992 |
Details available
A Cross Site Request Forgery (CSRF) vulnerability was discovered in PHPMyWind 5.6 which allows attackers to create a new administrator account without authentication.
Published: 2021-10-14T14:17:30.000Z
Updated: 2026-07-09T00:09:40.793Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18886 |
vulnerable | 2026-06-08 05:20:57.116519 |
Details available
Unrestricted File Upload in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the component 'admin/upload_file_do.php'.
Published: 2021-08-20T13:22:46.000Z
Updated: 2024-08-04T14:08:30.357Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-18885 |
vulnerable | 2026-06-08 05:20:57.116115 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16704 |
vulnerable | 2026-06-08 05:13:09.257358 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16703 |
vulnerable | 2026-06-08 05:13:09.256971 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.