CVE-2018-11487

Name of the Vulnerable Software and Affected Versions PHPMyWind version 5.5

Description The issue concerns a security problem where an attacker can inject malicious code. This is possible through the cid parameter to the "newsshow.php" endpoint, or the query string to the "news.php" or "about.php" endpoints.

Recommendations For PHPMyWind version 5.5, avoid using the cid parameter in the "newsshow.php" endpoint, and restrict access to the query strings in "news.php" and "about.php" until a fix is available.