CVE-2022-23336

S-CMS v5.0 was discovered to contain a SQL injection vulnerability in memberpay.php via the Oid parameter...

S-CMS SQL注入漏洞

S-CMS is a PHP and MySQL based Content Management System CMS from China's S-CMS Corporation. A SQL injection vulnerability exists in S-CMS, which originates from the product's failure to securely handle special characters in the Oid parameter in the memberpay.php file. The vulnerability can be...

PT-2022-15938

Name of the Vulnerable Software and Affected Versions S-CMS version 5.0 Description The issue is related to a SQL injection vulnerability in the member pay.php file via the O id parameter. This allows for potential exploitation by injecting malicious SQL code. Recommendations For S-CMS version 5....

CVE-2019-6805

SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php Oid parameter...

PT-2019-18363

Name of the Vulnerable Software and Affected Versions S-CMS version V3.0 Description A SQL Injection issue was discovered in the software. The issue is related to the O id parameter in the "alipay/alipayapi.php" endpoint. Recommendations For S-CMS version V3.0, avoid using the O id parameter in t...

SQL Injection Vulnerability in Flash cms O_id Parameter

Flash Flash cms is Zibo Flash Network Technology Co., Ltd. developed a corporate website system. A SQL injection vulnerability exists in the Oid parameter of the Flash cms /member/memberwuliu.asp page. The vulnerability stems from the program's failure to filter user-submitted data. An attacker c...

S-CMS enterprise website builder system/wapmember/post.asp page O_id parameter exists SQL injection vulnerability

S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is a SQL injection vulnerability in the Oid parameter of the /wapmember/post.asp page of the S-CMS enterprise website builder system. As the program fails to filter the data submitted by users, it...