CVE-2022-50936 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the admin panel.…
High CVSS: 8.7

CVE-2022-50936

WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the admin panel. Authenticated attackers can exploit the droplet upload functionality in the admin tools to create and execute arbitrary PHP code by crafting a specially designed zip file payload.
Vendor
Wbce
Product
Wbce Cms
CWE
CWE-434
Yayın Tarihi
2026-01-13 23:15:58
Güncelleme
2026-01-20 17:58:42
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-434 Wbce Cms HIGH Wbce 2026

Referanslar

https://github.com/WBCE/WBCE_CMS https://wbce.org/ https://wbce.org/de/downloads/ https://www.exploit-db.com/exploits/50707 https://www.vulncheck.com/advisories/wbce-cms-remote-code-execution-rce-authenticated