WBCE CMS Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in WBCE CMS version 1.5.2. This vulnerability allows authenticated attackers to upload malicious droplets through the admin panel. By exploiting the droplet upload functionality in the admin tools, attackers can create and execute arbitrary PHP code by crafting a specially designed zip file payload.

Impact

Exploitation of this vulnerability allows for authenticated remote code execution on the server where WBCE CMS is installed.

Reproduction

To reproduce this vulnerability, an authenticated user must log into the WBCE CMS admin panel. Once logged in, the user can upload a malicious zip file containing a payload that executes PHP code via the droplet upload feature in the admin tools. After the droplet is uploaded and executed, the PHP code can be used to execute commands on the server.