Lucene search
+L

6 matches found

Packet Storm
Packet Storm
•added 2023/08/03 12:00 a.m.•288 views

WonderCMS 0.6-Beta Remote File Inclusion

==================================================================================================================================== | Title : WonderCMS v0.6-Beta File inclusion Vulnerability | | Author : indoushka | | Tested on : windows 10 Français V.Pro / browser : Mozilla firefox 66.0.332-bit...

7.1AI score
SaveExploits0
CNVD
CNVD
•added 2017/03/21 12:00 a.m.•17 views

Wonder CMS PHP Remote File Inclusion

Wonder CMS is an open source content management system CMS. A PHP remote file inclusion vulnerability exists in the editInplace.php file in Wonder CMS version 2014. A remote attacker can execute arbitrary PHP code with the help of the hook parameter in the URL...

9.8CVSS7.8AI score0.0148EPSS
SaveExploits0References1
Mend
Mend
•added 2017/03/17 2:00 p.m.•7 views

CVE-2014-8705

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter...

9.8CVSS0.0148EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2017/03/17 12:00 a.m.•5 views

PT-2017-6262

Name of the Vulnerable Software and Affected Versions Wonder CMS 2014 Description The issue allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter in the editInplace.php file. Recommendations For Wonder CMS 2014, consider restricting access to the editInplace.php fi...

9.8CVSS0.0148EPSS
SaveExploits0References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2017/03/17 12:00 a.m.•9 views

CVE-2014-8705: Improper Input Validation

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter...

9.8CVSS6.4AI score0.0148EPSS
SaveExploits0References2
Packet Storm
Packet Storm
•added 2016/11/22 12:00 a.m.•41 views

WonderCMS 0.9.8 Cross Site Scripting

============================================= MGC ALERT 2016-006 - Original release date: Nov 16, 2016 - Last revised: Nov 21, 2016 - Discovered by: Manuel Garcia Cardenas - Severity: 4,8/10 CVSS Base Score ============================================= I. VULNERABILITY -------------------------...

7.4AI score
SaveExploits0
Rows per page
Query Builder