high7.5Public exploit code
CVE-2017-14523
WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Wonder CMS 2.3.1 - 'Host' Header Injection2018-02-05 · webapps · php
Impact
WonderCMS 2.3.1 is vulnerable to an HTTP Host header injection attack. It uses user-entered values to redirect pages. NOTE: the vendor reports that exploitation is unlikely because the attack can only come from a local machine or from the administrator as a self attack
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wondercms | Wondercms | Version 2.3.1 |