Approved changes feed: RSS · Atom

cpe:2.3:a:unspecified:wowonder:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUnspecified (6e0c47d7-4a6a-5e77-bb8d-ada54d9c4fcb)
ProductWowonder (8d853d3a-ae70-5b19-b677-53e07311d44d)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2022-1753 vulnerable 2026-06-08 05:39:13.858788 WoWonder Group requests.php access control
MEDIUM (5.4)
A vulnerability, which was classified as critical, was found in WoWonder. Affected is the file /requests.php which is responsible to handle group messages. The manipulation of the argument group_id allows posting messages in other groups. It is possible to launch the attack remotely but it might require authentication. A video explaining the attack has been disclosed to the public.
Published: 2022-05-17T05:15:12.000Z
Updated: 2025-04-15T14:40:33.905Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.