CVE-2014-8701

Wonder CMS 2014 allows remote attackers to obtain sensitive information by viewing /files/password, which reveals the unsalted MD5 hashed password.

Score

CVSS 3.0 7.5 High

Status

Modified - cve@mitre.org

Published

2017-03-17

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Wondercms (Wondercms)

References

• http://rossmarks.uk/portfolio.php
• http://rossmarks.uk/whitepapers/wonder_cms_2014.txt