CVE-2025-65950 - CVE House
Back to Database
Status published Critical CVE-2025-65950

WBCE CMS is Vulnerable to Time-Based Blind SQL Injection through groups[] Parameter

Vulnerability Description

WBCE CMS is a content management system. In versions 1.6.4 and below, the user management module allows a low-privileged authenticated user with permissions to modify users to execute arbitrary SQL queries. This can be escalated to a full database compromise, data exfiltration, effectively bypassing all security controls. The vulnerability exists in the admin/users/save.php script, which handles updates to user profiles. The script improperly processes the groups[] parameter sent from the user edit form. This issue is fixed in version 1.6.5.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-65950

Credits & Attribution

No credits recorded in the NVD database.

References

More from WBCE

View All →
CVE-2025-67504
WBCE CMS has Weak Random Number Generator in Password Generation Function
Critical 9.1
CVE-2025-66204
WBCE CMS allows brute-force protection bypass using X-Forwarded-For header
Medium 6.3
CVE-2025-65094
WBCE CMS is Vulnerable to Privilege Escalation via Group ID Manipulation (IDOR)
High 8.7
CVE-2025-34506
WBCE CMS 1.6.3 Authenticated Remote Code Execution via Module Upload
High 8.6
CVE-2022-4006
WBCE CMS Header class.login.php increase_attempts excessive authentication
Low 3.7

Affected Vendor

Affected Software

WBCE_CMS
Vulnerable Versions:
< 1.6.5

Timeline

Official Publish: December 10th, 2025
Last Modified: December 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact