VULNERABILITY INTELLIGENCE

CVE-2014-8702

CVSS score5.3 MEDIUM
EPSS probability1.35%
CISA KEVNot currently listed
Published2017-03-17
Last modified2026-06-17
CVSS vectorCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Description

Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.

Weakness classification

  • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor

Primary references