SQL injection vulnerability in pub/m_pending_news/delete_pending_news.jsp in Enorth Webpublisher CMS allows remote attackers to execute arbitrary SQL commands via the cbNewsId parameter.
SQL injection vulnerability
Exploit
CVE-2015-5617
NVD
Refer to CVE-2015-5617 NVD advisory