Wondercms Security Vulnerabilities and Issues — Wondercms CVE List

Lucene search

WondercmsWondercms

5 matches found

CVE•added 2017/03/17 2:59 p.m.•48 views

CVE-2014-8702

Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.

5.3CVSS5.1AI score0.0029EPSS

CVE•added 2017/03/17 2:59 p.m.•31 views

CVE-2014-8705

PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.

9.8CVSS9.6AI score0.00691EPSS

CVE•added 2017/03/17 2:59 p.m.•30 views

CVE-2014-8701

Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password.

7.5CVSS7.3AI score0.00315EPSS

CVE•added 2017/03/17 2:59 p.m.•29 views

CVE-2014-8703

Cross-site scripting (XSS) vulnerability in Wonder CMS 2014 allows remote attackers to inject arbitrary web script or HTML.

6.1CVSS6AI score0.00223EPSS

CVE•added 2017/03/17 2:59 p.m.•29 views

CVE-2014-8704

Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.

9.8CVSS9.1AI score0.01342EPSS