CVE-2020-18885

Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'

published August 20, 2021

CVSS
—
EPSS
4%
Percentile
89.3
In the wild
Unconfirmed
What it is

Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03571 · 89.3th percentile
Published
2021-08-20T13:22Z
EPSS history
Timeline
  • 20 AUG 13:22Z
    Command Injection in PHPMyWind v5.6 allows remote attackers to execute arbitrary code via the "text color" field of the component '/admin/web_config.php'
    cvelistv5