S-CMS PHP SQL Injection Vulnerability

S-CMS PHP is a content management system CMS based on PHP and MySQL. A SQL injection vulnerability exists in the member/membernews.php file in S-CMS PHP version 1.0, which can be exploited by remote attackers to execute SQL commands with the help of the 'type' parameter...

CVE-2018-18887

S-CMS PHP 1.0 has SQL injection in member/membernews.php via the type parameter aka the $Ntype field...