| Package | Affected versions | Patched versions |
|---|---|---|
| wondercms | = 2014 |
Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free