4 matches found
Design/Logic Flaw
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...
CVE-2018-20476
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...
CVE-2018-20476
Affected software: S-CMS 3.0. The vulnerability is an XSS in admin/demo.php via the T_id parameter, caused by inadequate input filtering of T_id. Impact: remote attackers can inject arbitrary Web script or HTML that executes in the context of a user’s browser. Exploitation: described as XSS via t...
CVE-2018-20476
An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php Tid parameter...