CVSS: 8.6EPSS: 0%CPEs: 1EXPL: 0CVE-2017-2119
https://notcve.org/view.php?id=CVE-2017-2119
Directory traversal vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to read arbitrary files via unspecified vectors. Vulnerabilidad de recorrido de directorios en WBCE CMS 1.1.10 y anteriores permite a un atacante remoto leer archivos de forma arbitraria a través de vectores no especificados. • http://jvn.jp/en/jp/JVN73083905/index.html http://www.securityfocus.com/bid/96467 https://forum.wbce.org/viewtopic.php?id=977 • CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') •
CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 0CVE-2017-2118
https://notcve.org/view.php?id=CVE-2017-2118
Cross-site scripting vulnerability in WBCE CMS 1.1.10 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Una vulnerabilidad de cross-site scripting en WBCE CMS 1.1.10 y anteriores permite a un atacante remoto inyectar web script o HTML a través de vectores no especificados. • http://jvn.jp/en/jp/JVN73083905/index.html http://www.securityfocus.com/bid/96467 https://forum.wbce.org/viewtopic.php?id=977 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •