Cross site scripting

Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2118

Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2118

Technical details about CVE-2017-2118 are not publicly provided in the supplied documents. No confirmed affected versions or vectors are described here. Monitor for updates from official advisories and vendor patches.

CVE-2017-2120

WBCE CMS (versions 1.1.10 and earlier) contains an SQL injection vulnerability (CWE-89) that can be triggered by an administrator, enabling execution of arbitrary SQL commands via unspecified vectors. The issue is listed as CVE-2017-2120. A patch exists for WBCE CMS 1.1.3–1.1.10; update to a vers...

CVE-2017-2119

Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2017-2120

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-2119

Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

CVE-2017-2119

CVE-2017-2119 : WBCE CMS versions 1.1.10 and earlier are affected by a directory traversal vulnerability (CWE-22) that allows remote attackers to read arbitrary files via unspecified vectors. The impact is local file disclosure on the server. Public fixes exist: patch WBCE CMS 1.1.3–1.1.10 is ava...

CVE-2017-2118

Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

CVE-2017-2120

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

PT-2017-15186

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.1.10 and earlier Description A directory traversal issue allows remote attackers to read arbitrary files. Recommendations For WBCE CMS versions 1.1.10 and earlier, at the moment, there is no information about a newer versio...

PT-2017-15187

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.1.10 and earlier Description A SQL injection issue allows an attacker with administrator rights to execute arbitrary SQL commands. Recommendations For WBCE CMS versions 1.1.10 and earlier, at the moment, there is no...

CVE-2017-2118: Improper Neutralization of Input During Web Page Generation

Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors...

PT-2017-15185

Name of the Vulnerable Software and Affected Versions WBCE CMS versions 1.1.10 and earlier Description A cross-site scripting issue allows remote attackers to inject arbitrary web script or HTML. Recommendations For WBCE CMS versions 1.1.10 and earlier, at the moment, there is no information abou...

CVE-2017-2120: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WBCE CMS 1.1.10 and earlier allows attacker with administrator rights to execute arbitrary SQL commands via unspecified vectors...

CVE-2017-2119: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors...

WBCE CMS vulnerable to SQL injection

Overview WBCE CMS provided by WBCE Team is an open-source Contents Management System CMS. WBCE CMS contains an SQL injection vulnerability CWE-89. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impact An...

WBCE CMS vulnerable to cross-site scripting

Overview WBCE CMS provided by WBCE Team is an open-source Contents Management System CMS. WBCE CMS contains a cross-site scripting vulnerability CWE-79. ASAI Ken reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership. Impa...

JVN#73083905: Multiple vulnerabilities in WBCE CMS

WBCE CMS provided by WBCE Team is an open-source Contents Management System CMS. WBCE CMS contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2017-2118 Version| Vector| Score ---|---|--- CVSS v3| CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N| Base Score: 6.1 CVSS v2|...