CVE-2017-18346: Web-Gooroo CMS Web-Gooroo

Critical severity, CVSS 9.8. EPSS: 2.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter.

Affected products

• Web-Gooroo CMS Web-Gooroo: up to and including 2013-01-19

Published 2019-07-03. Last modified 2026-06-17.