Lucene search
China National Vulnerability DatabaseCNVD-2023-71724HistoryAug 06, 2023 - 12:00 a.m.
WBCE CMS Arbitrary File Upload Vulnerability (CNVD-2023-71724)
2023-08-0600:00:00
China National Vulnerability Database
www.cnvd.org.cn
13
arbitrary file upload
vulnerability
wbce cms
php
mysql
remote code execution
0.001 Low
EPSS
Percentile
29.1%
WBCE CMS is an open source content management system (CMS) based on PHP and MySQL. An arbitrary file upload vulnerability exists in WBCE CMS version 1.6.1, which stems from the lack of validation of uploaded files in the /languages/install.php component. The vulnerability can be exploited to remotely execute arbitrary code by uploading a malicious file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| wbce wbce cms | eq | 1.6.1 |
Related
nvd
nvd
CVE-2023-38947
2023-08-03 16:15:12
cvelist
cvelist
CVE-2023-38947
2023-08-03 00:00:00
osv
osv
CVE-2023-38947
2023-08-03 16:15:12
prion
prion
Privilege escalation
2023-08-03 16:15:00
cve
cve
CVE-2023-38947
2023-08-03 16:15:12