Lucene search
+L

315 matches found

Kitploit
Kitploit
added 2026/08/26 8:55 a.m.2 views

wonderplugin

Wonderplugin für RCE VERWENDE DIESES FAKE-PLUGIN NICHT AUF DEINEM PRODUKTIONS-WEBSERVER! Dieses Repository dient zum Testen einer Schwachstelle in wonderCMS. Dieses Fake-Plugin enthält eine Backdoor-Webshell, die du in der Datei evil.php finden kannst. Verwandter Artikel WonderCMS 3.1.3 -...

5.6AI score
SaveExploits0References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

WonderCMS-CVE-2020-35314

CVE-2020-35314 - Authentifizierte entfernte Codeausführung in WonderCMS 3.1.3 Dieses Repository wurde mit dem Ziel erstellt, die Remote Code Execution-Schwachstelle in WonderCMS v3.1.3 zu testen. Dieses gefälschte Plugin enthält eine Backdoor-PHP-Shell, die sich in der Datei evil.php befindet. Es...

9.8CVSS0.26912EPSS
SaveExploits2
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.2 views

CVE-2023-41425

RCE für WonderCMS Versionen v3.2.0 bis v3.4.2 WonderCMS Versionen v3.2.0 bis v3.4.2 mit XSS-Schwachstelle ermöglichen es einem Angreifer, RCE zu erreichen, indem er eine Komponente über die installModule-Funktion hochlädt CVE-2023-41425 – ohne Kenntnis des Passworts. Funktionen: Automatisierte...

6.1CVSS6.6AI score0.54026EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/26 7:35 a.m.1 views

CVE-2023-41425-WonderCMS-Authenticated-RCE

CVE-2023-41425-WonderCMS-Authenticated-RCE Beschreibung WonderCMS v3.2.0 - v3.4.2 ist verwundbar. Angreifer können mithilfe eines Cross-Site-Scripting-Exploits XSS die volle Kontrolle über den Server übernehmen Nur für Bildungszwecke. Hier ist der Plan: So funktioniert es: Der Exploit missbraucht...

6.1CVSS6.7AI score0.54026EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/26 6:12 a.m.3 views

CVE-2022-43332

CVE-2022-43332 WonderCMS में क्रॉस-साइट स्क्रिप्टिंग विवरण: Wondercms v3.3.4 में एक क्रॉस-साइट स्क्रिप्टिंग XSS भेद्यता संभावित हमलावरों को कॉन्फ़िगरेशन पैनल के साइट शीर्षक फ़ील्ड में इंजेक्ट किए गए क्राफ्टेड पेलोड के माध्यम से मनमाने वेब स्क्रिप्ट या HTML निष्पादित करने की अनुमति देती है - इस तथ...

6.1CVSS5.7AI score0.00563EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/26 1:13 a.m.2 views

CVE-2023-41425-RCE-WonderCMS-4.3.2

🚨 WonderCMS RCE Exploit Tool CVE-2023-41425 Dieses Python-basierte offensive Sicherheitstool automatisiert die Ausnutzung einer Remote Code Execution RCE -Sicherheitslücke in WonderCMS 4.3.2 , speziell CVE-2023-41425. Es optimiert den Prozess der Erstellung eines schädlichen ZIP-Theme-Moduls und...

6.1CVSS6.7AI score0.54026EPSS
SaveExploits16References1
Kitploit
Kitploit
added 2026/08/25 8:47 a.m.2 views

CVE-2025-57055

CVE-2025-57055: Authentifizierte Remote-Code-Ausführung in WonderCMS 3.5.0 Angriffsmechanik In WonderCMS v3.5.0 existiert eine authentifizierte Remote-Code-Ausführungs-Schwachstelle RCE. Das Problem liegt in der Art und Weise, wie die Anwendung Remote-Theme/Modul-Installationen über...

6.5CVSS5.3AI score0.00409EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 4:14 a.m.1 views

WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425

WonderCMS 4.3.2 Exploits XSS vers RCE Aperçu Ces scripts exploitent une vulnérabilité XSS Cross-Site Scripting dans WonderCMS 4.3.2 pour parvenir à une Exécution de Code à Distance RCE. La charge utile XSS, lorsqu'elle est déclenchée par l'administrateur, installe automatiquement un reverse shell...

6.1CVSS6.9AI score0.54026EPSS
SaveExploits16
Kitploit
Kitploit
added 2026/08/24 10:29 p.m.2 views

CVE-2022-3992

CVE-2022-3992 Cross-Site Scripting in WonderCMS Beschreibung: Eine Cross-Site-Scripting XSS-Sicherheitslücke im Sanitization Management System v1.0 ermöglicht es potenziellen Angreifern, beliebige Dateien über einen manipulierten Namen in die Systemlogo-Felder der Systeminfo-Felder hochzuladen. D...

6.1CVSS5.9AI score0.00473EPSS
SaveExploits0
GithubExploit
GithubExploit
added 2026/05/27 11:39 p.m.137 views

poc-wondercms-360-xss

CVE — WonderCMS 3.6.0 Stored XSS via Search Widget Severity...

5.8AI score
SaveExploits0
Packet Storm
Packet Storm
added 2026/03/04 12:00 a.m.208 views

📄 WonderCMS 3.4.2 Shell Upload

Proof of concept exploit for an authentication shell upload vulnerability in WonderCMS version 3.4.2. ============================================================================================================================================= | Title : WonderCMS 3.4.2 Authenticated file upload...

6.1CVSS5.9AI score0.54026EPSS
SaveExploits16
RedhatCVE
RedhatCVE
added 2026/01/09 12:22 p.m.11 views

CVE-2018-14387

An issue was discovered in WonderCMS before 2.5.2. An attacker can create a new session on a web application and record the associated session identifier. The attacker then causes the victim to authenticate against the server using the same session identifier. The attacker can access the user's...

8.8CVSS6.8AI score0.01632EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2026/01/09 9:35 a.m.24 views

CVE-2024-41305

A Server-Side Request Forgery SSRF in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary requests via injection of crafted URLs into the pluginThemeUrl parameter...

7.1CVSS7.3AI score0.00186EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/12/13 8:02 p.m.8 views

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.8CVSS6.1AI score0.00416EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/12/12 9:31 p.m.13 views

EUVD-2024-55351

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.8CVSS5.6AI score0.00416EPSS
SaveExploits0References5
NVD
NVD
added 2025/12/12 8:15 p.m.9 views

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.8CVSS0.00416EPSS
SaveExploits0References4
OSV
OSV
added 2025/12/12 8:15 p.m.5 views

CVE-2024-58305

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.6CVSS5.8AI score0.00416EPSS
SaveExploits0References4
Cvelist
Cvelist
added 2025/12/12 7:56 p.m.42 views

CVE-2024-58305 WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.8CVSS0.00416EPSS
SaveExploits0References4
Vulnrichment
Vulnrichment
added 2025/12/12 7:56 p.m.1 views

CVE-2024-58305 WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation

WonderCMS 4.3.2 contains a cross-site scripting vulnerability that allows attackers to inject malicious JavaScript through the module installation endpoint. Attackers can craft a specially designed XSS payload to install a reverse shell module and execute remote commands by tricking an...

8.8CVSS5.7AI score0.00416EPSS
SaveExploits0References4
CVE
CVE
added 2025/12/12 7:56 p.m.33 views

CVE-2024-58305

WonderCMS 4.3.2 has a cross-site scripting vulnerability at the module installation endpoint. An attacker can craft a payload to inject JavaScript and trick an authenticated administrator into visiting a malicious link, enabling installation of a reverse shell module and remote command execution....

8.8CVSS5.7AI score0.00416EPSS
SaveExploits0References4
Rows per page
Query Builder