CVE-2014-8704

Critical

Published: 17/03/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.

Risk Assessment

Attackers can exploit this vulnerability to execute malicious code on the server, potentially leading to system compromise and data loss.

Recommendation

It is recommended to update Wonder CMS to the latest version and review theme configurations to minimize the risk of this vulnerability being exploited.

Original NVD description (English source)

Directory traversal vulnerability in index.php in Wonder CMS 2014 allows remote attackers to include and execute arbitrary local files via a crafted theme.