CVE-2022-50936
WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)
概要
WBCE CMS 1.5.2 - Remote Code Execution (RCE) (Authenticated)
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
WBCE CMS version 1.5.2 contains an authenticated remote code execution vulnerability that allows attackers to upload malicious droplets through the admin panel. Authenticated attackers can exploit the droplet upload functionality in the admin tools to create and execute arbitrary PHP code by crafting a specially designed zip file payload.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- advisory vulncheck.com
- package github.com
- report exploit-db.com
- web wbce.org
- web wbce.org