CVE Catalog
CVE-2014-8705
CriticalSummary
Wonder CMS 2014 has a PHP remote file inclusion vulnerability in editInplace.php that allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.
Risk Assessment
Attackers can exploit this vulnerability to execute code remotely, potentially leading to system takeover or data leakage.
Recommendation
It is recommended to update Wonder CMS to the latest version and secure the application against malicious code injection.
Original NVD description (English source)
PHP remote file inclusion vulnerability in editInplace.php in Wonder CMS 2014 allows remote attackers to execute arbitrary PHP code via a URL in the hook parameter.