Back to Database
Status published
Critical
CVE-2014-8704
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows...
Vulnerability Description
Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2014-8704
Credits & Attribution
No credits recorded in the NVD database.
References
More from wondercms
View All →CVE-2024-58305
WonderCMS 4.3.2 Cross-Site Scripting Remote Code Execution via Module Installation
High
8.6
CVE-2022-43332
A cross-site scripting (XSS) vulnerability in Wondercms v3.3.4 allows attackers...
Unknown
0
CVE-2020-35314
A remote code execution vulnerability in the installUpdateThemePluginAction function in...
Critical
9.8
CVE-2020-35313
A server-side request forgery (SSRF) vulnerability in the addCustomThemePluginRepository function...
Critical
9.8
CVE-2020-29469
WonderCMS 3.1.3 is affected by cross-site scripting (XSS) in the...
Medium
5.4
Affected Vendor
wondercms
View all reports →Affected Software
wondercms
Vulnerable Versions:
2014
Timeline
Official Publish:
March 17th, 2017
Last Modified:
August 6th, 2024
Added to House:
July 19th, 2026
CVSS Vectors
V3:
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses (CWE)
No CWE data available
MITRE ATT&CK TTPs
No associated TTPs found for this vulnerability.