CVE-2021-39503

CVE-2021-39503

PHPMyWind 5.6 is vulnerable to Remote Code Execution. Becase input is filtered without "<, >, ?, =, `,…." In WriteConfig() function, an attacker can inject php code to /include/config.cache.php file.

Source: CVE-2021-39503

답글 남기기

이메일 주소는 공개되지 않습니다. 필수 필드는 *로 표시됩니다