TI-2017-13521 CVE-2017-18346 · GHSA-jhg5-ccm6-6jqvSQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS…Priority MEDIUM 46SQL injection vulnerability in /wbg/core/_includes/authorization.inc.php in CMS Web-Gooroo through 2013-01-19 allows remote attackers to execute arbitrary SQL commands via the wbg_login parameter.CVSS 3.0CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.02063 · Published 2019-07-03 · No fix listed CWE-89