CVE-2018-17131: Phpmywind

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

admin/web_config.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the varvalue field.

Affected products

• Phpmywind Phpmywind: version 5.5 only

Published 2018-09-17. Last modified 2026-06-17.