CVE-2014-2303: Webedition CMS

High severity, CVSS 7.5. EPSS: 2.6% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the file browser component (we_fs.php) in webEdition CMS before 6.2.7-s1.2 and 6.3.x through 6.3.8 before -s1 allow remote attackers to execute arbitrary SQL commands via the (1) table or (2) order parameter.

Affected products

• Webedition Webedition CMS: version 6.2.7.0 only; version 6.3.3.0 only; version 6.3.8.0 only

Published 2014-06-13. Last modified 2026-06-17.