CVE-2020-35314

概要

参考情報

• robiso/wondercms · Product
• packetstormsecurity.com/files/160311/WonderCMS-3.1.3-Remote-Code-Execution.html · Exploit
• zetc0de.github.io/post/authenticated-rce-ssrf-wondercms · Exploit
• zetc0de.github.io/post/authenticated-rce-ssrf-wondercms · Exploit

wondercms のその他の脆弱性

• CVE-2025-57055中 6.5WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An authenticated admini…
• CVE-2025-3123高 7.2A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateMo…
• CVE-2024-41305中 4.7A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary req…
• CVE-2024-41304中 5.4An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via…
• CVE-2024-32746中 4.6A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or …