CVE-2025-34506

WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed.

CVSS v3 8.8 HIGH

8.8^/10

CVSS v3 : HIGH

Vector :

Exploitability : 2.8 / Impact : 5.9

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://github.com/Swammers8/WBCE-v1.6.3-Authenticated-RCE	Exploit Third Party Advisory
https://github.com/WBCE/WBCE_CMS	Product
https://wbce-cms.org/	Product
https://www.exploit-db.com/exploits/52132	Exploit Third Party Advisory VDB Entry
https://www.vulncheck.com/advisories/wbce-cms-authenticated-remote-code-execution-via-module-upload	Third Party Advisory
https://youtu.be/Dhg5gRe9Dzs?si=-WQoiWU1yqvYNz1e	Exploit

Configurations

Configuration 1 (hide)

cpe:2.3:a:wbce:wbce_cms:*:*:*:*:*:*:*:*

History

07 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) WBCE CMS versión 1.6.3 y anteriores contiene una vulnerabilidad de ejecución remota de código autenticada que permite a los administradores subir módulos maliciosos. Los atacantes pueden crear un módulo ZIP especialmente diseñado con código de shell inverso PHP incrustado para obtener acceso remoto al sistema cuando se instala el módulo.

Information

Published : 2025-12-11 22:15

Updated : 2026-10-29 21:17

NVD link : CVE-2025-34506

Mitre link : CVE-2025-34506

CVE.ORG link : CVE-2025-34506

JSON object : View

Products Affected

wbce

wbce_cms

CWE

CWE-434

Unrestricted Upload of File with Dangerous Type

{"id": "CVE-2025-34506", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-34506", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-12T19:33:20.317634Z"}}], "cvssMetricV31": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 8.8, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "LOW", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 2.8}], "cvssMetricV40": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "cvssData": {"Safety": "NOT_DEFINED", "version": "4.0", "Recovery": "NOT_DEFINED", "baseScore": 8.6, "Automatable": "NOT_DEFINED", "attackVector": "NETWORK", "baseSeverity": "HIGH", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "exploitMaturity": "NOT_DEFINED", "providerUrgency": "NOT_DEFINED", "userInteraction": "NONE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "HIGH", "subIntegrityImpact": "NONE", "vulnIntegrityImpact": "HIGH", "integrityRequirement": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "HIGH", "availabilityRequirement": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "subConfidentialityImpact": "NONE", "vulnConfidentialityImpact": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "vulnerabilityResponseEffort": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED"}}]}, "affected": [{"source": "disclosure@vulncheck.com", "affectedData": [{"vendor": "WBCE", "product": "WBCE CMS", "versions": [{"status": "affected", "version": "0", "versionType": "semver", "lessThanOrEqual": "1.6.3"}], "defaultStatus": "unaffected"}]}], "published": "2025-12-11T22:15:53.823", "references": [{"url": "https://github.com/Swammers8/WBCE-v1.6.3-Authenticated-RCE", "tags": ["Exploit", "Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://github.com/WBCE/WBCE_CMS", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://wbce-cms.org/", "tags": ["Product"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.exploit-db.com/exploits/52132", "tags": ["Exploit", "Third Party Advisory", "VDB Entry"], "source": "disclosure@vulncheck.com"}, {"url": "https://www.vulncheck.com/advisories/wbce-cms-authenticated-remote-code-execution-via-module-upload", "tags": ["Third Party Advisory"], "source": "disclosure@vulncheck.com"}, {"url": "https://youtu.be/Dhg5gRe9Dzs?si=-WQoiWU1yqvYNz1e", "tags": ["Exploit"], "source": "disclosure@vulncheck.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "disclosure@vulncheck.com", "description": [{"lang": "en", "value": "CWE-434"}]}], "descriptions": [{"lang": "en", "value": "WBCE CMS version 1.6.3 and prior contains an authenticated remote code execution vulnerability that allows administrators to upload malicious modules. Attackers can craft a specially designed ZIP module with embedded PHP reverse shell code to gain remote system access when the module is installed."}, {"lang": "es", "value": "WBCE CMS versi\u00f3n 1.6.3 y anteriores contiene una vulnerabilidad de ejecuci\u00f3n remota de c\u00f3digo autenticada que permite a los administradores subir m\u00f3dulos maliciosos. Los atacantes pueden crear un m\u00f3dulo ZIP especialmente dise\u00f1ado con c\u00f3digo de shell inverso PHP incrustado para obtener acceso remoto al sistema cuando se instala el m\u00f3dulo."}], "lastModified": "2026-10-29T21:17:05.027", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:wbce:wbce_cms:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "922BCB07-6BC8-448D-9E50-956A87DAF93E", "versionEndIncluding": "1.6.3"}], "operator": "OR"}]}], "sourceIdentifier": "disclosure@vulncheck.com"}