CVE-2023-41425 on Myles Nieman — Bloghttps://blog.msnieman.com/tags/cve-2023-41425/Recent content in CVE-2023-41425 on Myles Nieman — BlogHugoen-usThu, 02 Jul 2026 00:00:00 +0000Seahttps://blog.msnieman.com/writeups/sea/Thu, 02 Jul 2026 00:00:00 +0000https://blog.msnieman.com/writeups/sea/A WonderCMS site’s contact form SSRF is weaponized to deliver CVE-2023-41425, landing a shell as www-data; a password hash found in the CMS database cracks to pivot to a user account, and an internal monitoring service running as root is exploited to escalate.