Cross site request forgery (csrf)

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

Sql injection

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19332

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19332

CVE-2018-19332 affects S-CMS v1.5 and is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add endpoint. The CVE entry documents a cross-site request forgery flaw enabling unauthorized user creation, with CVSS data indicating a network-based, user-interaction-...

CVE-2018-19331

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

CVE-2018-19332

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

CVE-2018-19331

CVE-2018-19331 affects S-CMS v1.5: the search.php endpoint is vulnerable to SQL injection via the keyword parameter. Root cause: unsafely constructed SQL in the search feature. Exploitation via keyword parameter is documented; this could enable a SQL injection attack. No remediation or patch deta...

PT-2018-14921

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description A CSRF issue allows adding a new user via the "admin/ajax.php?type=member&action=add" API endpoint. Recommendations For S-CMS version 1.5, consider implementing proper CSRF protection mechanisms to prevent...

CVE-2018-19331: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter...

PT-2018-14920

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description A SQL injection issue was found in the search functionality. The vulnerability can be exploited through the keyword parameter in the "search.php" endpoint. Recommendations For S-CMS version 1.5, avoid using the...

CVE-2018-19332: Cross-Site Request Forgery (CSRF)

An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via the admin/ajax.php?type=member&action=add URI...

S-CMS Cross-Site Scripting Vulnerability

S-CMS is a content management system CMS based on PHP and MySQL. A cross-site scripting vulnerability exists in the search.php file in S-CMS version 1.5, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of the 'keyword' parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

Cross site scripting

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the keyword parameter...

CVE-2018-19145

This CVE concerns S-CMS v1.5 and an XSS vulnerability in search.php reachable via the keyword parameter. The issue is triggered through input handling in the search routine, allowing injection of web scripts or HTML. The core information confirms the vulnerability exists in the S-CMS 1.5 componen...

PT-2018-14834

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5 Description An issue was discovered in the software, which is related to a security problem. The problem is an XSS issue in the "search.php" file via the keyword parameter. Recommendations For S-CMS version 1.5, consider...