Sql injection

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...

CVE-2018-20480

CVE-2018-20480 affects S-CMS 1.0. A SQL injection vulnerability exists in the js/pic.php file, exploitable through the P_id parameter. The root cause is improper handling of the P_id input leading to SQL injection. Impact details in the sources indicate potential data exposure/modification, but t...

PT-2018-15405

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description An issue in S-CMS allows SQL Injection via the P id parameter in the "js/pic.php" endpoint. Recommendations For S-CMS version 1.0, avoid using the P id parameter in the "js/pic.php" endpoint until the issue is...

CVE-2018-20480: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php Pid parameter...