Vulnerability CVE-2021-27200
Published: 2021-06-11

Description:
In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.

 References:
https://www.exploit-db.com/exploits/49989
https://securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-27200
https://www.wowonder.com
Copyright 2024, cxsecurity.com

 

Back to Top