CVE Listesine Dön
CVE-2023-41425

Cross-site scripting in Wondercms

CVSS Skor

6.1

EPSS İhtimal

%54.3

Risk Skoru

3.3

Yayın

2 yıl önce

Overview (Genel Bakış)Public Exploits (18)Newsroom (Haberler)Vulnerability Timeline

Public Exploits · GitHub ve Metasploit Intelligence

Bu sekme NVD’nin exploit olarak etiketlediği kaynakları, CVE kimliğiyle eşleşen GitHub depolarını ve Rapid7 Metasploit Framework modüllerini tarar. Yalnızca bulunan gerçek kaynak bağlantıları gösterilir.

G
prodigiousMind/CVE-2023-41425
GitHub

WonderCMS Authenticated RCE - CVE-2023-41425 (★6)

Public PoCKaynak güncellemesi: 16.11.2023 20:07:49
G
charlesgargasson/CVE-2023-41425
GitHub

Wonder CMS RCE (XSS) (★0)

Public PoCKaynak güncellemesi: 12.08.2024 02:28:28
G
insomnia-jacob/CVE-2023-41425
GitHub

WonderCMS RCE CVE-2023-41425 (★0)

Public PoCKaynak güncellemesi: 12.08.2024 15:16:20
G
tiyeume25112004/CVE-2023-41425
GitHub

Research (★0)

Public PoCKaynak güncellemesi: 23.08.2024 08:28:16
G
thefizzyfish/CVE-2023-41425-wonderCMS_RCE
GitHub

Cross Site Scripting vulnerability in Wonder CMS v.3.2.0 thru v.3.4.2 allows a remote attacker to execute arbitrary code via a crafted script uploaded to the installModule component. (★0)

Public PoCKaynak güncellemesi: 28.08.2024 01:33:12
G
Twappz/CVE-2023-41425
GitHub

WonderCMS RCE CVE-2023-41425 (★0)

Public PoCKaynak güncellemesi: 21.09.2024 15:22:41
G
duck-sec/CVE-2023-41425
GitHub

CVE-2023-41425 (Wonder CMS XSS to RCE) exploit which serves required scripts locally. Good if you're lost at sea and have found a problem with your bike. (★0)

Public PoCKaynak güncellemesi: 02.10.2024 23:20:23
G
TanveerS1ngh/WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425
GitHub

CVE-2023-41425 Refurbish (★0)

Public PoCKaynak güncellemesi: 28.10.2024 05:32:02
G
h3athen/CVE-2023-41425
GitHub

Writing one because the one I found isn't working (★0)

Public PoCKaynak güncellemesi: 31.10.2024 00:43:53
G
Diegomjx/CVE-2023-41425-WonderCMS-Authenticated-RCE
GitHub

Xss injection, WonderCMS 3.2.0 -3.4.2 (★0)

Public PoCKaynak güncellemesi: 25.11.2024 03:08:05
G
0x0d3ad/CVE-2023-41425
GitHub

CVE-2023-41425 (XSS to RCE, Wonder CMS 3.2.0 <= 3.4.2) (★0)

Public PoCKaynak güncellemesi: 01.12.2024 04:28:45
G
xpltive/CVE-2023-41425
GitHub

Wonder CMS v3.2.0 - v3.4.2 XSS to RCE exploit (★0)

Public PoCKaynak güncellemesi: 22.12.2024 21:26:24
G
becrevex/CVE-2023-41425
GitHub

WonderCMS v3.4.2 NSE Discovery Script (★0)

Public PoCKaynak güncellemesi: 26.04.2025 01:14:30
G
Tea-On/CVE-2023-41425-RCE-WonderCMS-4.3.2
GitHub

Automates creation and hosting of a JavaScript XSS payload to install a malicious theme module, triggering a reverse shell via Remote Code Execution in WonderCMS. This tool uses PentestMonkey's PHP reverse shell script as the payload (★0)

Public PoCKaynak güncellemesi: 02.07.2025 01:28:09
E
WonderCMS 3.4.2 - Remote Code Execution (RCE)
Exploit-DB

WonderCMS 3.4.2 - Remote Code Execution (RCE)

Exploit referansıKaynak güncellemesi: 22.04.2025 00:00:00
G
https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413
GitHub

https://gist.github.com/prodigiousMind/fc69a79629c4ba9ee88a7ad526043413

Exploit referansı
G
0xDTC/WonderCMS-4.3.2-XSS-to-RCE-Exploits-CVE-2023-41425
GitHub

CVE-2023-41425 Refurbish

Public PoC
G
KGorbakon/CVE-2023-41425
GitHub

KGorbakon/CVE-2023-41425

Public PoC

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2023-41425"