Directory Traversal Vulnerability in Wonder CMS by Wonder CMS
CVE-2014-8704

9.8CRITICAL

Key Information:

Vendor

Wondercms

Status
Wondercms
Vendor
CVE Published:
17 March 2017
đź”” Create Wondercms Vulnerability Alert

What is CVE-2014-8704?

A directory traversal vulnerability in Wonder CMS allows remote attackers to leverage crafted themes to include and execute arbitrary local files on the server. This security flaw exposes the web application to potential exploitation, enabling unauthorized access to sensitive information or commands. Proper input validation and sanitization measures should be enforced to mitigate such risks.

References

http://rossmarks.uk/portfolio.php
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.