VYPR
Medium severity5.4NVD Advisory· Published May 17, 2022· Updated Jun 17, 2026

CVE-2022-1753

CVE-2022-1753

Description

A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public.

Affected products

3
  • WoWonder/WoWonder2 versions
    cpe:2.3:a:wowonder:wowonder:-:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:wowonder:wowonder:-:*:*:*:*:*:*:*
    • (no CPE)
  • unspecified/WoWonderv5
    Range: n/a

Patches

Vulnerability mechanics

References

3

News mentions

0

No linked articles in our index yet.