CVE-2015-5617: Enorth Webpublisher CMS

Critical severity, CVSS 9.8. EPSS: 2% chance of exploitation in the next 30 days.

SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.

Affected products

• Enorth Webpublisher CMS: any version

Published 2020-02-12. Last modified 2026-06-17.