CVE-2021-26935

CVE-2021-26935 affects WoWonder below version 3.1, where a SQL Injection flaw in requests.php?f=search-my-followers vulnerable to the event_id parameter allows remote attackers to access the database. The vulnerability is documented across multiple sources (NVD, CVE listings, and regional CN/VN s...

CVE-2021-26935

In WoWonder 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the eventid parameter...