← Back to browse
·
API
CVE-2021-3817
Severity
CRITICAL
CVSS
9.8
EPSS
0.38418
Risk score
52.65
CISA KEV
No
PoC
No
Published
2021-12-09
Modified
2024-08-03
First seen
2026-08-08
Aliases
EUVD-2021-27070, GHSA-MJX8-7R29-W8CQ
Products
wbce:wbce/wbce_cms unspecified <1.5.2
Sources
euvd
EUVD-2021-27070
Description
wbce_cms is vulnerable to Improper Neutralization of Special Elements used in an SQL Command
References
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-27070
https://huntr.dev/bounties/c330dc0d-220a-4b15-b785-5face4cf6ef7
https://github.com/wbce/wbce_cms/commit/6ca63f0cad5f0cd606fdb69a372f09b7d238f1d7
http://packetstormsecurity.com/files/165377/WBCE-CMS-1.5.1-Admin-Password-Reset.html