CVE-2025-34506

概要

参考情報

• Swammers8/WBCE-v1.6.3-Authenticated-RCE · Exploit
• WBCE/WBCE_CMS · Product
• wbce-cms.org · Product
• exploit-db.com/exploits/52132 · Exploit
• vulncheck.com/advisories/wbce-cms-authenticated-remote-code-execution-via-module-upload · Third Party Advisory
• youtu.be/Dhg5gRe9Dzs · Exploit

wbce cms のその他の脆弱性

• CVE-2022-50936高 8.8WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets thro…
• CVE-2023-53910中 5.4WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by in…
• CVE-2023-53909中 5.4WBCE CMS 1.6.1 contains a stored cross-site scripting vulnerability that allows authenticated attackers to inject malicious JavaScript by up…
• CVE-2023-53901中 6.1WBCE CMS 1.6.1 contains a cross-site scripting vulnerability that allows attackers to inject malicious HTML and CSS to capture user keystrok…
• CVE-2024-58283高 8.8WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files thro…