lukasz-rybak/CVE-2025-66204
PoCCVE-2025-66204 - WBCE CMS allows brute-force protection bypass using X-Forwarded-For header
01
exploited CVEs (1)
Known CVEs related to this entry.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-66204US | high8.1 | Exploit | ||
WBCE CMS is a content management system. Version 1.6.4 contains a brute-force protection bypass where an attacker can indefinitely reset the counter by modifying `X-Forwarded-For`… | ||||
scry
Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.
Free scan