Back to Database
Status published
Medium
CVE-2014-8702
Wonder CMS 2014 allows remote attackers to obtain sensitive information...
Vulnerability Description
Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8702
Credits & Attribution
No credits recorded in the NVD database.
References
More from wondercms
View All →CVE-2024-58305
WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation
High
8.6
CVE-2022-43332
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers...
Unknown
0
CVE-2020-35314
A remote code execution vulnerability in the installUpdateThemePluginAction function in...
Critical
9.8
CVE-2020-35313
A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function...
Critical
9.8
CVE-2020-29469
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the...
Medium
5.4
Affected Vendor
wondercms
View all reports →Affected Software
wondercms
Vulnerable Versions:
2014
Timeline
Official Publish:
March 17th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.