CVE-2021-26935

In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the…

published March 18, 2021

CVSS
—
EPSS
2%
Percentile
83.3
In the wild
Unconfirmed
What it is

In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the event_id parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02318 · 83.3th percentile
Published
2021-03-18T14:06Z
EPSS history
Timeline
  • 18 MAR 14:06Z
    In WoWonder < 3.1, remote attackers can gain access to the database by exploiting a requests.php?f=search-my-followers SQL Injection vulnerability via the…
    cvelistv5