CVE-2022-26254

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...

Command injection

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...

PT-2022-17745

Name of the Vulnerable Software and Affected Versions WoWonder The Ultimate PHP Social Network Platform version 4.0.0 Description The issue allows unauthenticated attackers to arbitrarily change group ID names due to an access control problem. Recommendations For WoWonder The Ultimate PHP Social...

CVE-2022-26254: Authorization Bypass Through User-Controlled Key

WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names...