477 matches found
CVE-2018-20478
S-CMS 1.0 contains a file-read vulnerability exploited via the admin/download.php DownName parameter. By passing a mixed-case extension (e.g., DownName=download.Php), an attacker can read files such as PHP source code. The issue is documented in CVE-2018-20478 and reflected in multiple feeds (NVD...
CVE-2018-20479
CVE-2018-20479 affects S-CMS 1.0, where an SQL injection is possible via wap_index.php?type=newsinfo S_id parameter. The CVSS data indicate remote, unauthenticated, low complexity exploit with high impact on confidentiality, integrity, and availability (per CVSS 3.0: 9.8). No remediation details ...
PT-2018-15404
Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows SQL Injection via the "wap index.php?type=newsinfo" API endpoint, specifically through the S id parameter. Recommendations For S-CMS version 1.0, avoid using the S id parameter in the "wap...
PT-2018-15403
Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows unauthorized access to certain files, including PHP source code, by manipulating the DownName parameter in the "admin/download.php" endpoint with a mixed-case file extension. For example, using...
PT-2018-15405
Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description An issue in S-CMS allows SQL Injection via the P id parameter in the "js/pic.php" endpoint. Recommendations For S-CMS version 1.0, avoid using the P id parameter in the "js/pic.php" endpoint until the issue is...
CVE-2018-20480: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...
CVE-2018-20479: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wapindex.php?type=newsinfo Sid parameter...
CVE-2018-20476: Improper Neutralization of Input During Web Page Generation
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...
CVE-2018-20477: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php Pno field...
CVE-2018-20478: Exposure of Sensitive Information to an Unauthorized Actor
An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameter with a mixed-case extension, as demonstrated by a DownName=download.Php value...
S-CMS e-commerce system SQL injection vulnerability in front-end ms***/fo***.php page
S-CMS e-commerce system is an e-commerce software. A SQL injection vulnerability exists in the front-end ms/fo.php page of S-CMS e-commerce system. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
Sql injection
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
CVE-2018-20018
CVE-2018-20018 affects S-CMS v3.0, where the S_id parameter enables SQL injection, demonstrated via /1/?type=productinfo&S_id=140. The connected CNVD/CNVD-2019-08326 and CNVD entries corroborate SQLi in S-CMS 3.0. The CVSS data shows base score 7.5 (high) for CVSS3.0 and 5.0 (medium) for CVSS2.0,...
PT-2018-15239
Name of the Vulnerable Software and Affected Versions S-CMS version 3.0 Description The issue is related to SQL injection, which can be exploited via the S id parameter. An example of exploitation is demonstrated by the "/1/?type=productinfo&S id=140" URI. Recommendations For S-CMS version 3.0,...
CVE-2018-20018: Improper Neutralization of Special Elements used in an SQL Command
S-CMS V3.0 has SQL injection via the Sid parameter, as demonstrated by the /1/?type=productinfo&Sid=140 URI...
S-CMS Cross-Site Request Forgery Vulnerability
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. S-CMS 1.5 there is a cross-site request forgery vulnerability, attackers can add new users through admin/ajax.php?type=member&action=add URI to take...