EUVD-2020-11850

Malware in sbrugna...

CVE-2020-19954

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...

PT-2021-10423

Name of the Vulnerable Software and Affected Versions: S-CMS version 3.0 Description: An XML External Entity XXE issue was found in the "api/notify.php" endpoint, allowing attackers to read arbitrary files. This could potentially lead to sensitive information disclosure. Recommendations: For S-CM...

CVE-2020-19954: Improper Restriction of XML External Entity Reference

An XML External Entity XXE vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files...