Multiple Vulnerabilities in WonderCMS

WonderCMS is a PHP-based content management system. WonderCMS suffers from local file inclusion, information disclosure, and directory traversal vulnerabilities. An attacker could exploit these vulnerabilities to execute arbitrary local scripts and retrieve contextually arbitrary files from an...

Wonder CMS 0.6-Beta File Inclusion / Traversal / Disclosure Vulnerabilities

Wonder CMS version 0.6-Beta suffers from inclusion, password disclosure, and directory traversal vulnerabilities. | Title : WonderCMS 0.6-Beta Multi Vulnerability | Author : indoushka | email : email protected | Dork : ©2015 Your website | Powered by WonderCMS | Login | Tested on: windows 8.1...

Wonder CMS 0.6-Beta File Inclusion / Traversal / Disclosure

| Title : WonderCMS 0.6-Beta Multi Vulnerability | Author : indoushka | email : [email protected] | Dork : ©2015 Your website | Powered by WonderCMS | Login | Tested on: windows 8.1 Français V.Pro | Download : http://wondercms.com/ ======================================= File inclusion :...

CVE-2011-5317

Cross-site scripting XSS vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter...

Cross site scripting

Cross-site scripting XSS vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter...

CVE-2011-5317

Cross-site scripting XSS vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter...

CVE-2011-5317

The CVE-2011-5317 entry describes an XSS vulnerability in WonderCMS prior to version 0.4, exploitable through the content parameter in editText.php. Affected software: WonderCMS (pre-0.4); vulnerable component: editText.php. Root cause: cross-site scripting via unescaped content input. Impact: al...

PT-2015-3513

Name of the Vulnerable Software and Affected Versions WonderCMS versions prior to 0.4 Description A cross-site scripting XSS issue allows remote attackers to inject arbitrary web script or HTML via the content parameter in editText.php. Recommendations For versions prior to 0.4, update to version...

CVE-2011-5317: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter...

XSS vulnerability in WonderCMS

Vulnerability ID: HTB22759 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwondercms.html Product: WonderCMS Vendor: Robert Isoski http://krneky.com/en/wondercms Vulnerable Version: 0.3.3 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: XSS Cross...

WonderCMS 0.3.3 Cross Site Scripting

Vulnerability ID: HTB22759 Reference: http://www.htbridge.ch/advisory/xssvulnerabilityinwondercms.html Product: WonderCMS Vendor: Robert Isoski http://krneky.com/en/wondercms Vulnerable Version: 0.3.3 and probably prior versions Vendor Notification: 21 December 2010 Vulnerability Type: XSS Cross...

WonderCMS 0.3.3 - editText.php Cross-Site Scripting

WonderCMS 0.3.3 - editText.php Cross-Site Scripting source: https://www.securityfocus.com/bid/45712/info WonderCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in th...

WonderCMS 0.3.3 - 'editText.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/45712/info WonderCMS is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context of...

Cross-site Scripting (XSS) Vulnerability in WonderCMS

High-Tech Bridge SA Security Research Lab has discovered vulnerability in WonderCMS which could be exploited to perform cross-site scripting attacks. 1 Cross-site scripting XSS vulnerability in WonderCMS The vulnerability exists due to input sanitation error in the "content" parameter in...

WonderCMS <= 0.3 Multiple Vulnerabilities

WonderCMS is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wondercms:wondercms"; ifdescripti...

WonderCMS 'page' Parameter Cross Site Scripting And Information Disclosure Vulnerabilities

WonderCMS is prone to a cross-site scripting vulnerability and an information- disclosure vulnerability because it fails to properly sanitize user- supplied input. An attacker may leverage these issues to obtain potentially sensitive information and to execute arbitrary script code in the browser...