CVE-2024-58283 | Teknoloji dünyasından en güncel haberleri ve güvenlikle ilgili gelişmeleri takip edin.

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder fil…
High CVSS: 8.7

CVE-2024-58283

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary system commands through a user-controlled parameter.
Vendor
Wbce
Product
Wbce Cms
CWE
CWE-434
Yayın Tarihi
2025-12-10 22:16:20
Güncelleme
2025-12-16 15:09:04
Source Identifier
disclosure@vulncheck.com
KEV Date Added
-

Kategoriler

CWE-434 Wbce Cms HIGH Wbce 2025

Referanslar

https://github.com/WBCE/WBCE_CMS/archive/refs/tags/1.6.2.zip https://wbce-cms.org/ https://www.exploit-db.com/exploits/52039 https://www.vulncheck.com/advisories/wbce-cms-remote-code-execution-via-elfinder-file-upload https://github.com/WBCE/WBCE_CMS/archive/refs/tags/1.6.2.zip