CVE-2025-34506 — WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload
WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a spec…
Published: 2025-12-11 · CVSS: 8.6 · CVSS 4.0
WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7