Entreprise française de cybersécurité depuis 2004
☎ 03 60 47 09 81 - info@securiteinfo.com

CVE-2017-18346

Description

SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter.

POC

Reference

- https://vuldb.com/?id.123295

- https://www.exploit-db.com/exploits/42577/

Github

No PoCs found on GitHub currently.