Critical · 9.8 Scanner template CVE-2022-46020 EUVD-2022-48858GHSA-6frp-xc6r-j375

WBCE CMS v1.5.4 can implement getshell by modifying the upload file type.

Published Dec 20, 2022 · Updated Apr 17, 2025 · Assigned by mitre

Description

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

WBCE CMS v1.5.4 - Remote Code Execution http/cves/2022/CVE-2022-46020.yaml

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

References

https://github.com/10vexh/Vulnerability/blob/main/WBCE%20CMS%20v1.5.4%20getshell.pdf