Skip to content

CVE-2019-8435 admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.

MediumCVSS 4.8 EPSS 0.59%
Published
Updated
Exploit status
No public exploit known

Description

admin/default.php in PHPMyWind v5.5 has XSS via an HTTP Host header.

Affected products

ProductAffected versionsFixed in
phpmywind = 5.5 No fix listed

References

  • github.com exploit issue-tracking mitigation third-party-advisory