CVE-2018-17132: Phpmywind

High severity, CVSS 7.2. EPSS: 2.1% chance of exploitation in the next 30 days.

admin/goods_update.php in PHPMyWind 5.5 allows Admin users to execute arbitrary code via the attrvalue[] array parameter.

Affected products

• Phpmywind Phpmywind: version 5.5 only

Published 2018-09-17. Last modified 2026-06-17.