CVE-2025-65950
HIGHWBCE CMS < 1.6.5 - Authenticated SQL Injection via User Management groups[] Parameter
Title source: llmExploitation Summary
EIP tracks 1 public exploit for CVE-2025-65950. PoCs published by lukasz-rybak.
AI-analyzed exploit summary This repository provides a detailed technical analysis of CVE-2025-65950, a time-based blind SQL injection vulnerability in WBCE CMS. It includes a step-by-step proof-of-concept with payload examples and screenshots, demonstrating how a low-privileged user can exploit the `groups[]` parameter in the user management module to execute arbitrary SQL queries.
Description
WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter sent from the user edit form. This issue is fixed in version 1.6.5.
Exploits (1)
This repository provides a detailed technical analysis of CVE-2025-65950, a time-based blind SQL injection vulnerability in WBCE CMS. It includes a step-by-step proof-of-concept with payload examples and screenshots, demonstrating how a low-privileged user can exploit the `groups[]` parameter in the user management module to execute arbitrary SQL queries.
References (3)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H