CVE-2023-41425

Wonder CMS RCE | | Description : XSS to RCE, Wonder CMS 3.2.0 evil/evil.php EOF zip -r evil.zip evil/ JS payload that will install the new theme cat form+action=" EOF...

CVE-2023-41425-wonderCMS_RCE

CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. For educational purposes only Requires knowledge of loginURL, admin access or the...

CVE-2023-41425

CVE-2023-41425 Description A Cross Site Scripting vulnerability in Wonder CMS Version 3.2.0 to Version 3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. This is a modifed version of the original exploit by prodigiousMind which...

CVE-2023-41425

CVE-2023-41425 Description Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. Working The attached exploit "exploit.py" performs the following actions: 1. It takes 3...

CVE-2023-41425

https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6BA8AC1AC Wonder CMS RCE | | Description : XSS to RCE, Wonder CMS 3.2.0 evil/evil.php EOF root@kitploit: zip -r evil.zip evil/ JS payload that will install the new theme root@kitploit: cat xssrce.js var xhr=new XMLHttpRequest;...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 XSS to RCE, Wonder CMS 3.2.0 = 3.4.2 Usage root@kitploit: ➜ CVE-2023-41425 python3 exploit.py Enter target URL RHOST, e.g., http://example.com/loginURL: http://redacted.com/loginURL Enter your local host IP LHOST, e.g., 10.10.14.xxx: xx.xx.xx.xx Enter your local web...

CVE-2023-41425

CVE-2023-41425 CVE-2023-41425 is a reflected XSS vulnerability in Wonder CMS which further allows to execute arbitrary code through a malicious script via the installModule component. Usage Running the exploit against the target's loginURL, specifying our IP and port for the web server hosting th...

EUVD-2014-8533

Malware in sbrugna...

EUVD-2014-8536

Malware in sbrugna...

EUVD-2014-8534

Malware in sbrugna...

EUVD-2014-8537

Malware in sbrugna...

EUVD-2014-8535

Malware in sbrugna...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

Exploit for Cross-site Scripting in Wondercms

CVE-2023-41425 CVE-2023-41425 is a reflected XSS vulnerabilit...

Exploit for Cross-site Scripting in Wondercms

https://sploitus.com/exploit?id=3A833277-4844-5F02-AFEF-5EA6B...

Exploit for Cross-site Scripting in Wondercms

CVE-2023-41425-wonderCMSRCE Cross Site Scripting vulnerabilit...

CVE-2023-41425

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

Cross site scripting

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

CVE-2023-41425: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component...

CVE-2023-41425

CVE-2023-41425 (WonderCMS) affects WonderCMS versions 3.2.0–3.4.2. The vulnerability is an XSS/authenticated file upload flaw in the installModule pathway that enables an attacker to upload a crafted script, which can subsequently execute arbitrary code on the server (RCE). Connected exploits des...