TI-2022-01619 CVE-2022-1753 · GHSA-g3h3-m2g5-25f2
WoWonder Group requests.php access control
Priority MEDIUM 58
A vulnerability, which was classified as critical, was found in WoWonder.
Wowonder
Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9
Exploited now
Wowonder records in CISA KEVNo Wowonder vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records
TI-2022-20962 CVE-2022-42984 · GHSA-jjmh-h947-x6vh
WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection…
Priority MEDIUM 50
WoWonder Social Network Platform 4.1.4 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=search&s=recipients.
TI-2021-08746 CVE-2021-27200 · GHSA-c4g5-mpg9-gp62
In WoWonder 3.0.4, remote attackers can take over any account due to the weak…
Priority MEDIUM 48
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php.
TI-2022-19179 CVE-2022-40405 · GHSA-fwf9-p28q-qv4h
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection…
Priority MEDIUM 40
WoWonder Social Network Platform v4.1.2 was discovered to contain a SQL injection vulnerability via the offset parameter at requests.php?f=load-my-blogs.
TI-2021-08540 CVE-2021-26935 · GHSA-m72c-rpmg-5x3j
In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a…
Priority LOW 37
In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter.
TI-2022-09655 CVE-2022-26254 · GHSA-795q-xxmc-p2wg
WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an…
Priority LOW 26
WoWonder The Ultimate PHP Social Network Platform v4.0.0 was discovered to contain an access control issue which allows unauthenticated attackers to arbitrarily change group ID names.