CVE-2023-29855

WBCE CMS 1.5.3 has a command execution vulnerability via admin/languages/install.php.

• CWE-77
• CWE-77

• https://github.com/WBCE/WBCE_CMS/issues/544Exploit, Issue Tracking, Third Party Advisory
• https://github.com/WBCE/WBCE_CMS/issues/544Exploit, Issue Tracking, Third Party Advisory

Published

Apr 18, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-29847AeroCMS v0.0.1 was discovered to contain multiple stored cro…5.4
• CVE-2023-29848Bang Resto 1.0 was discovered to contain a stored cross-site…4.8
• CVE-2023-29849Bang Resto 1.0 was discovered to contain multiple SQL inject…8.8
• CVE-2023-2985A use after free flaw was found in hfsplus_put_super in fs/h…5.5
• CVE-2023-29850SENAYAN Library Management System (SLiMS) Bulian v9.5.2 does…7.5
• CVE-2023-29854DirCMS 6.0.0 has a Cross Site Scripting (XSS) vulnerability …6.1
• CVE-2023-29856D-Link DIR-868L Hardware version A1, firmware version 1.12 i…9.8
• CVE-2023-29857An issue in Teslamate v1.27.1 allows attackers to obtain sen…5.3
• CVE-2023-2986The Abandoned Cart Lite for WooCommerce plugin for WordPress…9.8
• CVE-2023-29860An insecure permissions in /Taier/API/tenant/listTenant inte…7.5
• CVE-2023-29861An issue found in FLIR-DVTEL version not specified allows a …9.8
• CVE-2023-29862An issue found in Agasio-Camera device version not specified…9.8