Beveiligingsadvies

CVE-2024-58283

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2025-12-10 21:14:54

Laatst bijgewerkt 2026-04-07 14:08:36

Toegewezen door VulnCheck

CVSS-score 8.7

Status PUBLISHED

Beschrijving

WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary system commands through a user-controlled parameter.

← Alle CVE's bekijken Bekijk op cve.org ↗