CVE-2014-8702
MEDIUMWonder CMS 2014 - Info Disclosure
Title source: llmDescription
Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.
Scores
CVSS v3
5.3
EPSS
0.0029
EPSS Percentile
52.1%
Attack Vector
NETWORK
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
Classification
CWE
CWE-200
Status
published
Affected Products (2)
wondercms/wondercms
n/a/n/a
Timeline
Published
Mar 17, 2017
Tracked Since
Feb 18, 2026