CVE-2017-2120

Summary

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

Affected Software

VendorProductVersion RangeStatus
WBCE TeamWBCE CMS1.1.10 and earlieraffected

Weaknesses

  • SQL Injection

ADP Enrichment

CVE Program Container

Additional References

References