CVE-2020-35313

Description

References

• robiso/wondercms · Product
• packetstormsecurity.com/files/160310/WonderCMS-3.1.3-Code-Execution-Server-Side-Request-Forgery.html · Exploit
• zetc0de.github.io/post/authenticated-rce-ssrf-wondercms · Exploit

Weitere Schwachstellen in wondercms

• CVE-2025-57055MITTEL 6.5WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An authenticated admini…
• CVE-2025-3123HOCH 7.2A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateMo…
• CVE-2024-41305MITTEL 4.7A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary req…
• CVE-2024-41304MITTEL 5.4An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via…
• CVE-2024-32746MITTEL 4.6A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or …