CVE-2022-46020

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...

CVE-2022-46020

creationtimestamp| type| source ---|---|--- 2022-12-20 18:13:05+00:00| seen| https://t.me/cibsecurity/54978 2022-12-27 15:30:10+00:00| published-proof-of-concept| https://t.me/GithubRedTeam/3640 2023-01-24 06:19:45+00:00| published-proof-of-concept| https://t.me/BlueRedTeam/2569 2023-01-24...

CVE-2022-46020

WBCE CMS v1.5.4 is affected by CVE-2022-46020, a remote code execution vulnerability caused by allowing getshell via modification of the upload file type. The NVD/Nuclei and related sources describe a critical flaw (CVSS v3.1: 9.8) with network attack vector, no privileges required, and high impa...

CVE-2022-46020

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...

CVE-2022-46020

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type...