CVE-2017-14521

In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload.

Score

CVSS 3.0 8.8 High

Status

Modified - cve@mitre.org

Published

2018-01-26

Last modified

2024-08-05

Weaknesses

CWE-434

Affected products

• Wondercms (Wondercms)

References

• https://securitywarrior9.blogspot.in/2018/01/vulnerability-in-wonder-cms-leading-to.html
• https://www.exploit-db.com/exploits/43963/