What is CVE-2014-8702?

CVE-2014-8702 is a medium-severity vulnerability in Wondercms, classified under Information Disclosure. CVSS score: 5.3/10. Published 2017-03-17.

How severe is CVE-2014-8702?

Medium severity. CVSS v3 base score is 5.3 out of 10.

Information disclosure in Wondercms

CVE-2014-8702

Wonder CMS 2014 allows remote attackers to obtain sensitive information by logging into the application with an array for the password, which reveals the installation path in an error message.

Vulnerability class: Information Disclosure

EPSS: 0.014 (68.7th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.3 (Medium). Vector: CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N.

Affected products

Wondercms — versions 2014
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (Third Party Advisory, x_refsource_MISC)
cve@mitre.org (Exploit, x_refsource_MISC)

Frequently asked questions

What is CVE-2014-8702?: CVE-2014-8702 is a medium-severity vulnerability in Wondercms, classified under Information Disclosure. CVSS score: 5.3/10. Published 2017-03-17.
How severe is CVE-2014-8702?: Medium severity. CVSS v3 base score is 5.3 out of 10.