CVE-2017-2120

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors.

Date published : 2017-04-28

http://www.securityfocus.com/bid/96467

http://jvn.jp/en/jp/JVN73083905/index.html