wowonder kayıtları
wowonder üreticisine ait 6 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 0
- Düzeltme kaydı olan
- %0
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')3
- CWE-284 Improper Access Control1
- CWE-330 Use of Insufficiently Random Values1
- CWE-639 Authorization Bypass Through User-Controlled Key1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
6 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
40Planlayın | CVE-2021-27200İstismar yok | In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php.wowonder · wowonder · CWE-330 | Kritik9,8 | — | %3,3 | 11 Haz 2021 |
39İzleyin | CVE-2022-42984İstismar yok | WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=sewowonder · wowonder · CWE-89 | Kritik9,8 | — | %0,7 | 14 Kas 2022 |
31İzleyin | CVE-2021-26935İstismar yok | In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerawowonder · wowonder · CWE-89 | Yüksek7,5 | — | %2,3 | 18 Mar 2021 |
30İzleyin | CVE-2022-40405İstismar yok | WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=lwowonder · wowonder · CWE-89 | Yüksek7,5 | — | %0,6 | 14 Kas 2022 |
21İzleyin | CVE-2022-26254İstismar yok | WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attawowonder · wowonder · CWE-639 | Orta5,3 | — | %0,8 | 27 Mar 2022 |
17İzleyin | CVE-2022-1753İstismar yok | WoWonder Group requests.php access controlwowonder · wowonder · CWE-284 | Orta4,3 | — | %0,9 | 17 May 2022 |
- CVE-2021-2720040Planlayın
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php.
KritikCVSS 9,8İstismar yokEPSS %3wowonder · wowonder11 Haz 2021
- CVE-2022-4298439İzleyin
WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=se
KritikCVSS 9,8İstismar yokEPSS %0wowonder · wowonder14 Kas 2022
- CVE-2021-2693531İzleyin
In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnera
YüksekCVSS 7,5İstismar yokEPSS %2wowonder · wowonder18 Mar 2021
- CVE-2022-4040530İzleyin
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=l
YüksekCVSS 7,5İstismar yokEPSS %0wowonder · wowonder14 Kas 2022
- CVE-2022-2625421İzleyin
WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated atta
OrtaCVSS 5,3İstismar yokEPSS %0wowonder · wowonder27 Mar 2022
- CVE-2022-175317İzleyin
WoWonder Group requests.php access control
OrtaCVSS 4,3İstismar yokEPSS %0wowonder · wowonder17 May 2022