critical9.8Public exploit code
CVE-2021-3817
wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WBCE CMS 1.5.1 - Admin Password Reset2021-12-20 · webapps · php
Impact
wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Wbce | Wbce Cms | before 1.5.2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html
- https://github.com/wbce/wbce_cms/commit/6ca63f0cad5f0cd606fdb69a372f09b7d238f1d7
- https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7
- http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html
- https://github.com/wbce/wbce_cms/commit/6ca63f0cad5f0cd606fdb69a372f09b7d238f1d7
- https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7