wonderplugin

Wonderplugin für RCE VERWENDE DIESES FAKE-PLUGIN NICHT AUF DEINEM PRODUKTIONS-WEBSERVER! Dieses Repository dient zum Testen einer Schwachstelle in wonderCMS. Dieses Fake-Plugin enthält eine Backdoor-Webshell, die du in der Datei evil.php finden kannst. Verwandter Artikel WonderCMS 3.1.3 -...

CVE-2025-57055

CVE-2025-57055: Esecuzione remota di codice autenticata in WonderCMS 3.5.0 Meccanismo della vulnerabilità Esiste una vulnerabilità di esecuzione remota di codice RCE autenticata in WonderCMS v3.5.0. Il problema deriva da come l'applicazione gestisce installazioni remote di temi/moduli tramite...

CVE-2023-41425

RCE für WonderCMS Versionen v3.2.0 bis v3.4.2 WonderCMS Versionen v3.2.0 bis v3.4.2 mit XSS-Schwachstelle ermöglichen es einem Angreifer, RCE zu erreichen, indem er eine Komponente über die installModule-Funktion hochlädt CVE-2023-41425 – ohne Kenntnis des Passworts. Funktionen: Automatisierte...

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Beschreibung WonderCMS v3.2.0 - v3.4.2 ist verwundbar. Angreifer können mithilfe eines Cross-Site-Scripting-Exploits XSS die volle Kontrolle über den Server übernehmen Nur für Bildungszwecke. Hier ist der Plan: So funktioniert es: Der Exploit missbraucht...

WonderCMS-CVE-2020-35314

CVE-2020-35314 - Authentifizierte entfernte Codeausführung in WonderCMS 3.1.3 Dieses Repository wurde mit dem Ziel erstellt, die Remote Code Execution-Schwachstelle in WonderCMS v3.1.3 zu testen. Dieses gefälschte Plugin enthält eine Backdoor-PHP-Shell, die sich in der Datei evil.php befindet. Es...

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 Exploit XSS verso RCE Panoramica Questi script sfruttano una vulnerabilità XSS Cross-Site Scripting in WonderCMS 4.3.2 per ottenere Esecuzione Remota di Codice RCE. Il payload XSS, quando innescato dall'amministratore, installa automaticamente una reverse shell sul server target...

CVE-2022-43332

CVE-2022-43332 Cross Site Scripting in WonderCMS Descrizione: Una vulnerabilità di cross-site scripting XSS in Wondercms v3.3.4 consente a potenziali attaccanti di eseguire script web arbitrari o HTML tramite un payload appositamente creato iniettato nel campo Site title del Pannello di...

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 Strumento di Exploit RCE per WonderCMS CVE-2023-41425 Questo strumento offensivo di sicurezza basato su Python automatizza lo sfruttamento di una vulnerabilità di Remote Code Execution RCE in WonderCMS 4.3.2 , in particolare la CVE-2023-41425. Semplifica il processo di creazione di un modulo te...

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Beschreibung: Eine Cross-Site-Scripting XSS-Sicherheitslücke im Sanitization Management System v1.0 ermöglicht es potenziellen Angreifern, beliebige Dateien über einen manipulierten Namen in die Systemlogo-Felder der Systeminfo-Felder hochzuladen. D...

poc-wondercms-360-xss

CVE — WonderCMS 3.6.0 Stored XSS via Search Widget Severity...

📄 WonderCMS 3.4.2 Shell Upload

Proof of concept exploit for an authentication shell upload vulnerability in WonderCMS version 3.4.2. ============================================================================================================================================= | Title : WonderCMS 3.4.2 Authenticated file upload...

CVE-2018-14387

An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record the associated session identifier. The attacker then causes the victim to authenticate against the server using the same session identifier. The attacker can access the user's...

CVE-2024-41305

A Server-Side Request Forgery SSRF in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter...

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

EUVD-2024-55351

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

CVE-2024-58305 WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

CVE-2024-58305 WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

CVE-2024-58305

WonderCMS 4.3.2 has a cross-site scripting vulnerability at the module installation endpoint. An attacker can craft a payload to inject JavaScript and trick an authenticated administrator into visiting a malicious link, enabling installation of a reverse shell module and remote command execution....