← All advisories

High severity8.8OSV Advisory· Published Jan 26, 2018· Updated Jun 17, 2026

CVE-2017-14521

CVE-2017-14521

Description

In WonderCMS 2.3.1, the upload functionality accepts random application extensions and leads to malicious File Upload.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Robiso/WondercmsOSV
Range: 1.1.0-beta, 1.2.0-beta, 2.0.0, …
WonderCMS/Wondercms3 versions
cpe:2.3:a:wondercms:wondercms:2.3.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:wondercms:wondercms:2.3.0:*:*:*:*:*:*:*
- cpe:2.3:a:wondercms:wondercms:2.3.1:*:*:*:*:*:*:*
- (no CPE)range: <=2.3.1

Patches

Vulnerability mechanics

References

2

securitywarrior9.blogspot.in/2018/01/vulnerability-in-wonder-cms-leading-to.htmlnvdExploitTechnical DescriptionThird Party Advisory
www.exploit-db.com/exploits/43963/nvdExploitThird Party AdvisoryVDB Entry

News mentions

0

No linked articles in our index yet.