CVE-2017-18346

SQL injection vulnerability in /wbg/core/includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbglogin parameter...

CVE-2017-18346

CVE-2017-18346 is a SQL injection vulnerability affecting CMS Web-Gooroo up to 2013-01-19. The flaw exists in /wbg/core/_includes/authorization.inc.php and allows remote attackers to execute arbitrary SQL commands by supplying a crafted wbg_login parameter. The NVD entry reports a high/severe imp...