CVE-2021-27200 | BDVDB-2026-155387 Detail

Description#

In WoWonder 3.0.4, remote attackers can take over any account due to the weak cryptographic algorithm in recover.php. The code parameter is easily predicted from the time of day.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://www.wowonder.com
https://securityforeveryone.com/blog/wowonder-0-day-vulnerability-cve-2021-27200
https://www.exploit-db.com/exploits/49989

Exploit#

No public exploit known

History#

Version 12021-06-11Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.