CVE-2021-26935

概要

参考情報

• securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-26935 · Third Party Advisory
• exploit-db.com/exploits/49657 · Exploit

wowonder のその他の脆弱性

• CVE-2022-42984緊急 9.8WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=se…
• CVE-2022-40405高 7.5WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=l…
• CVE-2022-26254中 5.3WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated atta…
• CVE-2021-27200緊急 9.8In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is …