CVE-2025-65950: HIGH Severity SQL Injection Vulnerability in WBCE CMS | Secably CVE Database

Summary

CVE-2025-65950 is a high-severity SQL Injection vulnerability affecting WBCE CMS versions 1.6.4 and below. A low-privileged authenticated user with user modification permissions can exploit this vulnerability to execute arbitrary SQL queries, potentially leading to full database compromise and data exfiltration. Upgrade to version 1.6.5 or later to mitigate this risk.

Technical Details

CVE-2025-65950 is an SQL Injection vulnerability located in the admin/users/save.php script of WBCE CMS. This script handles updates to user profiles, including group assignments. The vulnerability arises from the improper processing of the groups[] parameter submitted via the user edit form. Specifically, the application fails to adequately sanitize and validate the input received in this parameter before incorporating it into an SQL query. This allows an attacker to inject malicious SQL code into the query, which is then executed by the database server. By crafting a specially designed groups[] parameter, an attacker can bypass security controls and directly manipulate the database, potentially gaining access to sensitive information, modifying data, or even executing arbitrary commands on the database server. The lack of proper input validation and sanitization is the root cause of this vulnerability.

Affected Products and Versions

WBCE CMS versions 1.6.4 and below

Impact Assessment

Successful exploitation of CVE-2025-65950 can have severe consequences for WBCE CMS installations.

Data Breach Risk: Attackers can exfiltrate sensitive data, including user credentials, personal information, and confidential business data.
System Compromise: The attacker can gain full control of the database server, potentially leading to complete system compromise.
Denial of Service: Malicious SQL queries can be used to disrupt the normal operation of the WBCE CMS website, leading to a denial-of-service condition.
Privilege Escalation: Attackers can escalate their privileges within the WBCE CMS system, gaining administrative access and control over the entire website.

Remediation

Immediate Actions

Upgrade to WBCE CMS version 1.6.5 or later: This version contains a patch that addresses the SQL Injection vulnerability.
Review User Permissions: Ensure that only trusted users have permissions to modify other user profiles.

Long-term Solutions

Implement Input Validation and Sanitization: Thoroughly validate and sanitize all user inputs to prevent SQL Injection attacks.
Use Parameterized Queries: Employ parameterized queries or prepared statements to prevent SQL code from being interpreted as part of the query.
Regular Security Audits: Conduct regular security audits and penetration testing to identify and address potential vulnerabilities.

References

Detection & Scanning

This vulnerability can be detected by analyzing web server logs for suspicious SQL queries targeting the admin/users/save.php script. Security scanners capable of detecting SQL Injection vulnerabilities can also be used. Furthermore, monitoring database activity for unusual or unauthorized queries can help identify potential exploitation attempts.

Scan Your Website

Secably AI Scanner can detect this and 50+ other vulnerabilities automatically.

Start Free Scan