PT-2019-12000

Name of the Vulnerable Software and Affected Versions S-CMS PHP version 1.0 Description The issue is related to SQL injection, which can be exploited via the id parameter in the /js/scms.php?action=unlike API endpoint. Recommendations For S-CMS PHP version 1.0, as a temporary workaround, consider...

CVE-2019-10708: Improper Neutralization of Special Elements used in an SQL Command

S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter...