CVE-2024-58283 — WBCE CMS 1.6.2 Remote Code Execution via Elfinder File Upload
WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attack…
Published: 2025-12-10 · CVSS: 8.7 · CVSS 4.0
WBCE CMS version 1.6.2 contains a remote code execution vulnerability that allows authenticated attackers to upload malicious PHP files through the Elfinder file manager. Attackers can exploit the file upload functionality in the elfinder connector to upload a web shell and execute arbitrary system commands through a user-controlled parameter.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7