SQL injection vulnerability in the miniform module in WBCE CMS v.1.6.0 allows remote unauthenticated attacker to execute arbitrary code via the DB_RECORD_TABLE parameter.
References
| Link | Resource |
|---|---|
| https://forum.wbce.org/viewtopic.php?pid=42046#p42046 | Issue Tracking |
| https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1 | Release Notes |
| https://pastebin.com/PBw5AvGp | Third Party Advisory |
| https://forum.wbce.org/viewtopic.php?pid=42046#p42046 | Issue Tracking |
| https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1 | Release Notes |
| https://pastebin.com/PBw5AvGp | Third Party Advisory |
Configurations
History
21 Nov 2024, 08:15
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://forum.wbce.org/viewtopic.php?pid=42046#p42046 - Issue Tracking | |
| References | () https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1 - Release Notes | |
| References | () https://pastebin.com/PBw5AvGp - Third Party Advisory |
16 Nov 2023, 19:20
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
| First Time |
Wbce wbce Cms
Wbce |
|
| CWE | CWE-89 | |
| CPE | cpe:2.3:a:wbce:wbce_cms:1.6.0:*:*:*:*:*:*:* | |
| References | () https://github.com/WBCE/WBCE_CMS/releases/tag/1.6.1 - Release Notes | |
| References | () https://pastebin.com/PBw5AvGp - Third Party Advisory | |
| References | () https://forum.wbce.org/viewtopic.php?pid=42046#p42046 - Issue Tracking |
10 Nov 2023, 06:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-11-10 06:15
Updated : 2024-11-21 08:15
NVD link : CVE-2023-39796
Mitre link : CVE-2023-39796
CVE.ORG link : CVE-2023-39796
JSON object : View
Products Affected
wbce
- wbce_cms
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')