CVE-2021-26935

2021-03-1814:06:55

mitre

www.cve.org

wowonder

sql injection

cve-2021-26935

remote attackers

database access

EPSS

0.006

Percentile

78.3%

JSON

In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter.

References

securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-26935

www.exploit-db.com/exploits/49657

EPSS

0.006

Percentile

78.3%

JSON

Related for CVELIST:CVE-2021-26935