CVE-2014-8705

2017-03-1714:00:00

mitre

www.cve.org

AI Score

9.7

Confidence

High

EPSS

0.005

Percentile

75.8%

JSON

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.

References

rossmarks.uk/portfolio.php

rossmarks.uk/whitepapers/wonder_cms_2014.txt