S-CMS Access Control Error Vulnerability

S-CMS is a PHP and MySQL-based content management system (CMS) from S-CMS, a Chinese company. S-CMS suffers from an access control error vulnerability, which originates from an unauthorized access vulnerability in CMS Enterprise Website Construction System 5.0. An attacker can use this vulnerability to directly access the specified backend path without logging into the backend to obtain backend administrator privileges.