CVE-2018-17134

2018-09-1704:00:00

mitre

www.cve.org

AI Score

7.2

Confidence

High

EPSS

0.001

Percentile

46.2%

JSON

admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the cfg_author field in conjunction with a crafted cfg_webpath field.

References

github.com/panghusec/exploit/issues/7