Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
WonderCMS 3.5.0 is vulnerable to Server-Side Request Forgery (SSRF) in the custom module installation functionality. An authenticated administrator can supply a malicious URL via the pluginThemeUrl POST parameter. The server fetches the provided URL using curl_exec() without sufficient validation, allowing the attacker to force internal or external HTTP requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
WonderCMS 安全漏洞
Vulnerability Description
WonderCMS是WonderCMS公司的一套基于PHP的开源内容管理系统（CMS）。 WonderCMS 3.5.0版本存在安全漏洞，该漏洞源于自定义模块安装功能中未充分验证pluginThemeUrl参数，可能导致服务端请求伪造攻击。
CVSS Information
N/A
Vulnerability Type
N/A