CVE-2023-7191

creationtimestamp| type| source ---|---|--- 2023-12-31 17:26:54+00:00| seen| https://t.me/ctinow/161144 2024-01-01 01:32:28+00:00| seen| https://t.me/cibsecurity/74073 2024-01-22 09:11:14+00:00| seen| https://t.me/ctinow/171038 2025-04-17 19:58:02+00:00| published-proof-of-concept|...

CVE-2023-7191

CVE-2023-7191 : S-CMS (PHP/MySQL) up to version 2.0_build20220529-20231006 contains a SQL injection in the file component member/reg.php. The root cause is manipulation of the arguments M_login/M_email, enabling potentially arbitrary SQL execution. Multiple connected sources confirm the vulnerabi...