CVE-2020-35313

creationtimestamp| type| source ---|---|--- 2022-12-07 08:32:54+00:00| published-proof-of-concept| https://t.me/thebugbountyhunter/6693...

CVE-2020-35313

WonderCMS 3.1.3 is affected by a server-side request forgery (SSRF) in the addCustomThemePluginRepository function of index.php, enabling remote code execution via a crafted URL to the theme/plugin installer. Exploitation requires an authenticated session; a confirmed path in the public docs show...

WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution

Exploit Title: WonderCMS 3.1.3 - Authenticated SSRF to Remote Remote Code Execution Date: 2020-11-27 Exploit Author: zetc0de Vendor Homepage: https://www.wondercms.com/ Software Link: https://github.com/robiso/wondercms/releases/download/3.1.3/WonderCMS-3.1.3.zip Version: 3.1.3 Tested on: Ubuntu...