CVE-2017-2120

—

CVSS 3.0

7.2 high

EPSS

1%p69

Published

Apr 28, 2017 (Apr 28, 2017)

Modified

Jun 17, 2026

Description

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

Vendors: wbce
Products: wbce cms
Weakness: CWE-89
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.