CVE-2018-17132
admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.
Published: 2018-09-17 · CVSS: Unscored
admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7