CNNVD-202512-1078 Information
Dec 09, 2025
cve
CNNVD ID
CNNVD-202512-1078
Related CVE
- CNNVD Published: 2025-12-09
Description (Chinese)
WBCE CMS是WBCE CMS开源的一套基于PHP和MySQL的开源内容管理系统（CMS）。 WBCE CMS 1.6.4版本存在安全漏洞，该漏洞源于暴力破解保护绕过，可能导致无限密码猜测尝试。
Description (English)
WBCE CMS is a WBCE CMS Open Content Management System (CMS) based on PHP and MySQL. There is a security loophole in version 1.6.4 of the WBCE CMS, which stems from the violent break-through of protection, which could lead to an unlimited attempt to guess passwords.
Hazard Level
High
Vulnerability Type
其他
Affected Vendor
WBCE CMS
Published
2025-12-09
Last Modified
2026-02-24
References
https://github.com/WBCE/WBCE_CMS/commit/3765baddf27f31bbbea9c0228c452268621b25e5 https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.5 https://github.com/WBCE/WBCE_CMS/security/advisories/GHSA-f676-f375-m7mw https://access.redhat.com/security/cve/cve-2025-66204
Patch
https://github.com/WBCE/WBCE_CMS/releases
Share on: