CVE-2017-18346: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in /wbg/core/includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbglogin parameter...

PT-2019-8295

Name of the Vulnerable Software and Affected Versions CMS Web-Gooroo versions prior to 2013-01-19 Description The issue allows remote attackers to execute arbitrary SQL commands via the wbg login parameter in the /wbg/core/ includes/authorization.inc.php file. This enables attackers to inject...