漏洞信息
尽管我们使用了先进的大模型技术,但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性,但请您根据实际情况进行核实和判断。
Vulnerability Title
WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload
Vulnerability Description
WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed.
CVSS Information
N/A
Vulnerability Type
危险类型文件的不加限制上传
Vulnerability Title
WBCE CMS 代码问题漏洞
Vulnerability Description
WBCE CMS是WBCE CMS开源的一套基于PHP和MySQL的开源内容管理系统(CMS)。 WBCE CMS 1.6.3及之前版本存在代码问题漏洞,该漏洞源于允许管理员上传恶意模块,可能导致远程代码执行。
CVSS Information
N/A
Vulnerability Type
N/A