Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
WbceWbce Cms

18 matches found

CVE
CVE•added 2022/02/24 3:15 p.m.•117 views

CVE-2022-25099

A vulnerability in the component /languages/index.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file.

7.8CVSS7.8AI score0.00467EPSS
CVE
CVE•added 2022/02/24 3:15 p.m.•76 views

CVE-2022-25101

A vulnerability in the component /templates/install.php of WBCE CMS v1.5.2 allows attackers to execute arbitrary code via a crafted PHP file.

7.8CVSS7.8AI score0.00467EPSS
CVE
CVE•added 2022/04/28 8:15 p.m.•70 views

CVE-2022-28477

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS).

6.1CVSS6.1AI score0.00278EPSS
CVE
CVE•added 2022/05/17 4:15 p.m.•66 views

CVE-2022-30073

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via /admin/users/save.php.

5.4CVSS5.2AI score0.13759EPSS
CVE
CVE•added 2022/05/17 5:15 p.m.•55 views

CVE-2022-30072

WBCE CMS 1.5.2 is vulnerable to Cross Site Scripting (XSS) via \admin\pages\sections_save.php namesection2 parameters.

5.4CVSS5.2AI score0.00245EPSS
CVE
CVE•added 2022/11/25 4:15 p.m.•53 views

CVE-2022-45038

A cross-site scripting (XSS) vulnerability in /admin/settings/save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Website Footer field.

5.4CVSS5.2AI score0.1315EPSS
CVE
CVE•added 2022/12/20 4:15 p.m.•52 views

CVE-2022-46020

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

9.8CVSS9.5AI score0.84584EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•50 views

CVE-2022-45012

A cross-site scripting (XSS) vulnerability in the Modify Page module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Source field.

4.8CVSS4.9AI score0.00096EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•49 views

CVE-2022-45017

A cross-site scripting (XSS) vulnerability in the Overview Page settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Post Loop field.

4.8CVSS4.9AI score0.00096EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•48 views

CVE-2022-45016

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Footer field.

4.8CVSS4.9AI score0.00096EPSS
CVE
CVE•added 2022/11/25 4:15 p.m.•48 views

CVE-2022-45037

A cross-site scripting (XSS) vulnerability in /admin/users/index.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Display Name field.

5.4CVSS5.2AI score0.1315EPSS
CVE
CVE•added 2022/11/15 10:15 p.m.•44 views

CVE-2022-4006

A vulnerability, which was classified as problematic, has been found in WBCE CMS. Affected by this issue is the function increase_attempts of the file wbce/framework/class.login.php of the component Header Handler. The manipulation of the argument X-Forwarded-For leads to improper restriction of ex...

7.5CVSS5.9AI score0.00097EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•44 views

CVE-2022-45015

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Results Footer field.

4.8CVSS4.9AI score0.00096EPSS
CVE
CVE•added 2022/11/25 4:15 p.m.•43 views

CVE-2022-45040

A cross-site scripting (XSS) vulnerability in /admin/pages/sections_save.php of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name Section field.

5.4CVSS5.2AI score0.00084EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•42 views

CVE-2022-45014

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Results Header field.

4.8CVSS4.9AI score0.00096EPSS
CVE
CVE•added 2022/11/25 4:15 p.m.•42 views

CVE-2022-45036

A cross-site scripting (XSS) vulnerability in the Search Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the No Results field.

5.4CVSS5.2AI score0.00084EPSS
CVE
CVE•added 2022/11/25 4:15 p.m.•42 views

CVE-2022-45039

An arbitrary file upload vulnerability in the Server Settings module of WBCE CMS v1.5.4 allows attackers to execute arbitrary code via a crafted PHP file.

7.2CVSS7.2AI score0.00088EPSS
CVE
CVE•added 2022/11/21 3:15 p.m.•39 views

CVE-2022-45013

A cross-site scripting (XSS) vulnerability in the Show Advanced Option module of WBCE CMS v1.5.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Section Header field.

4.8CVSS4.9AI score0.00096EPSS