CVE-2015-4134: Phpwind

Medium severity, CVSS 5.8. EPSS: 2.1% chance of exploitation in the next 30 days.

Open redirect vulnerability in goto.php in phpwind 8.7 allows remote attackers to redirect users to arbitrary web sites and conduct phishing attacks via a URL in the url parameter.

Affected products

• Phpwind Phpwind: version 8.7 only

Published 2015-05-28. Last modified 2026-06-17.