S-CMS Access Control Error Vulnerability

S-CMS is a PHP and MySQL-based content management system CMS from S-CMS, a Chinese company. S-CMS suffers from an access control error vulnerability, which originates from an unauthorized access vulnerability in CMS Enterprise Website Construction System 5.0. An attacker can use this vulnerabilit...

CVE-2021-37270

The CVE-2021-37270 entry concerns the CMS Enterprise Website Construction System 5.0. Multiple sources (NVD and CNVD family, CNVD/CNNVD variants) describe an unauthorized access vulnerability that allows an attacker to directly access a backend path without authentication and obtain backend admin...

PT-2021-21597

Name of the Vulnerable Software and Affected Versions CMS Enterprise Website Construction System version 5.0 Description The issue allows attackers to gain unauthorized access to the background administrator authority without logging in. This is achieved by directly accessing a specified backgrou...

CVE-2021-37270: Missing Authorization

There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5.0. Attackers can use this vulnerability to directly access the specified background path without logging in to the background to obtain the background administrator authority...