7 matches found
CVE-2024-10989
A vulnerability classified as critical has been found in code-projects E-Health Care System 1.0. This affects an unknown part of the file /Admin/detail.php. The manipulation of the argument sid leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed ...
CVE-2019-9925
S-CMS PHP v1.0 has XSS in 4.edu.php via the Sid parameter...
S-CMS SQL Injection Vulnerability (CNVD-2018-26679)
S-CMS is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in S-CMS version 1.0, which can be exploited by remote attackers to execute SQL commands by sending the 'Sid' parameter to the wapindex.php?type=newsinfo URL...
PT-2018-15404
Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows SQL Injection via the "wap index.php?type=newsinfo" API endpoint, specifically through the S id parameter. Recommendations For S-CMS version 1.0, avoid using the S id parameter in the "wap...
S-CMS SQL Injection Vulnerability (CNVD-2019-08326)
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 3.0 has a SQL injection vulnerability, which can be exploited by attackers through the Sid parameter to conduct SQL injection attacks...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
PT-2018-15239
Name of the Vulnerable Software and Affected Versions S-CMS version 3.0 Description The issue is related to SQL injection, which can be exploited via the S id parameter. An example of exploitation is demonstrated by the "/1/?type=productinfo&S id=140" URI. Recommendations For S-CMS version 3.0,...