CVE-2022-23336

creationtimestamp| type| source ---|---|--- 2022-02-15 00:33:07+00:00| seen| https://t.me/cibsecurity/37454...

CVE-2022-23336

S-CMS v5.0 has a SQL injection in member_pay.php via the O_id parameter. Root cause: improper handling of O_id leads to injectable SQL statements. Impact ranges from partial confidentiality, integrity, and availability impacts per CVSS data (base scores 7.5/9.8). No exploitation details or fixes ...