Show filters
24 Total Results
Displaying 21-24 of 24
Sort by:
Attacker Value
Unknown
CVE-2014-8702
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.
0
Attacker Value
Unknown
CVE-2014-8705
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.
0
Attacker Value
Unknown
CVE-2014-8704
Disclosure Date: March 17, 2017 (last updated November 26, 2024)
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.
0
Attacker Value
Unknown
CVE-2011-5317
Disclosure Date: January 01, 2015 (last updated October 05, 2023)
Cross-site scripting (XSS) vulnerability in editText.php in WonderCMS before 0.4 allows remote attackers to inject arbitrary web script or HTML via the content parameter.
0
