Wbce Cms Security Vulnerabilities and Issues — Wbce Cms CVE List

Lucene search

WbceWbce Cms

5 matches found

CVE•added 2023/09/28 2:15 p.m.•89 views

CVE-2023-43871

A File upload vulnerability in WBCE v.1.6.1 allows a local attacker to upload a pdf file with hidden Cross Site Scripting (XSS).

5.4CVSS5.2AI score0.00214EPSS

CVE•added 2023/11/10 6:15 a.m.•65 views

CVE-2023-39796

SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.

9.8CVSS9.8AI score0.8192EPSS

CVE•added 2023/10/21 7:15 a.m.•45 views

CVE-2023-46054

Cross Site Scripting (XSS) vulnerability in WBCE CMS v.1.6.1 and before allows a remote attacker to escalate privileges via a crafted script to the website_footer parameter in the admin/settings/save.php component.

5.4CVSS5.3AI score0.00109EPSS

CVE•added 2023/08/03 4:15 p.m.•31 views

CVE-2023-38947

An arbitrary file upload vulnerability in the /languages/install.php component of WBCE CMS v1.6.1 allows attackers to execute arbitrary code via a crafted PHP file.

7.2CVSS7.2AI score0.0012EPSS

CVE•added 2023/04/18 6:15 p.m.•28 views

CVE-2023-29855

WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.

7.2CVSS7.1AI score0.00099EPSS