CVE-2017-2120

Publication date

2017-04-28 16:00:00

Family

jpcert

State

PUBLISHED

Description

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.