CVE-2022-40405

概要

参考情報

• nhiephon/Research · Third Party Advisory

wowonder のその他の脆弱性

• CVE-2022-42984緊急 9.8WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=se…
• CVE-2022-26254中 5.3WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated atta…
• CVE-2021-27200緊急 9.8In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is …
• CVE-2021-26935高 7.5In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnera…