CVE-2023-7190 S-CMS sql injection

A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument Atext/Aurl/Acontact leads to sql injection. The exploit has been...

CVE-2023-7190

CVE-2023-7190 affects S-CMS prior to or including version 2.0_build20220529-20231006. The vulnerability arises from an SQL injection in the unknown function of /member/ad.php?action=ad, triggered by manipulating the A_text/A_url/A_contact parameters. Public exploitation has been disclosed. The ve...