CVE-2020-35313

Mô tả

Tham khảo

• robiso/wondercms · Product
• packetstormsecurity.com/files/160310/WonderCMS-3.1.3-Code-Execution-Server-Side-Request-Forgery.html · Exploit
• zetc0de.github.io/post/authenticated-rce-ssrf-wondercms · Exploit

Lỗ hổng khác của wondercms

• CVE-2025-57055TRUNG BÌNH 6.5WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An authenticated admini…
• CVE-2025-3123CAO 7.2A vulnerability, which was classified as critical, has been found in WonderCMS 3.5.0. Affected by this issue is the function installUpdateMo…
• CVE-2024-41305TRUNG BÌNH 4.7A Server-Side Request Forgery (SSRF) in the Plugins Page of WonderCMS v3.4.3 allows attackers to force the application to make arbitrary req…
• CVE-2024-41304TRUNG BÌNH 5.4An arbitrary file upload vulnerability in the uploadFileAction() function of WonderCMS v3.4.3 allows attackers to execute arbitrary code via…
• CVE-2024-32746TRUNG BÌNH 4.6A cross-site scripting (XSS) vulnerability in the Settings section of WonderCMS v3.4.3 allows attackers to execute arbitrary web scripts or …