477 matches found
S-CMS suffers from SQL injection vulnerability (CNVD-2020-27168)
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...
File upload vulnerability in S-CMS enterprise website building system (CNVD-2020-20176)
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in S-CMS, which can be exploited by an attacker to gain control of the web server...
Logic flaw vulnerability in the frontend of S-CMS enterprise website builder system
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise station building system front platform there is a logic flaw vulnerability, attackers can use the vulnerability to...
S-CMS enterprise website building system v3.0 backend has SQL injection vulnerability (CNVD-2019-45336)
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS v3.0 background SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...
SQL Injection Vulnerability in s-cms Enterprise Website Builder System
Shining CMS enterprise building station system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise building station to provide solutions for the product, the front-end template style main HTML5 template, featuring good animation, page flow, responsive layout, the main...
File Upload Vulnerability in S-CMS Enterprise Website Builder System
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A file upload vulnerability exists in the S-CMS enterprise website builder system. An attacker can exploit the vulnerability to writ...
SQL Injection Vulnerability in s-cms E-commerce System
S-CMS e-commerce system is developed by php+mysql, the website is easy and fast to install. Search engine is more easy to crawl and index , provide more features to improve user-friendly experience . s-cms e-commerce system has a SQL injection vulnerability , attackers can exploit the vulnerabili...
CVE-2019-17368
S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...
CVE-2019-17368
S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...
Code injection
S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...
CVE-2019-17368
S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...
CVE-2019-17368
CVE-2019-17368 affects S-CMS v1.5 with a reflected/self-XSS in tpl.php via the parameter in member_login.php. The connected Red Hat/Redirection entries confirm the same description. The available sources do not provide exploitation status, affected versions beyond v1.5, or remediation details. Ro...
CVE-2019-17368: Improper Neutralization of Input During Web Page Generation
S-CMS v1.5 has XSS in tpl.php via the member/memberlogin.php from parameter...
PT-2019-15108
Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the member login.php parameter in the tpl.php file. Recommendations For S-CMS version 1.5,...
S-CMS php version enterprise website builder system v3.0 backend aj***.php C**_1y*** parameter SQL injection vulnerability
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS php version of the enterprise website building system v3.0 background aj.php C1y parameter there is a SQL injection...
S-CMS enterprise website builder system aj***.php page G_s*** parameter exists SQL injection vulnerability
S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS enterprise website building system aj.php page Gs parameters exist SQL injection vulnerability, attackers can use the...
S-CMS php version hospital website building system v1.0 backend aj***.php S**_sh*** parameter has SQL injection vulnerability
S-CMS Hospital Station Building System with applet is developed with php+mysql, which is easy and convenient to operate. S-CMS php version of the hospital building system v1.0 background aj.php Ssh parameter SQL injection vulnerability, attackers are able to exploit the vulnerability to obtain...
S-CMS e-commerce system aj***.php page L_f*** parameter has SQL injection vulnerability
S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Lf parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...