CVE-2018-18887

S-CMS PHP 1.0 has SQL injection in member/membernews.php via the type parameter aka the $Ntype field...

CVE-2018-18887

CVE-2018-18887 affects S-CMS PHP 1.0. The vulnerability is a SQL injection in the file member/member_news.php, exploitable via the type parameter (the $N_type field). Public references (NVD) assign CVSS v2 base score 7.5 (HIGH) and CVSS v3 base score 9.8 (CRITICAL). No exploit details or practica...