2 matches found
CVE-2023-7190: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument Atext/Aurl/Acontact leads to sql injection. The exploit has been...
8.8CVSS6AI score0.00479EPSS
SaveExploits0References2
PT-2023-32934
Name of the Vulnerable Software and Affected Versions S-CMS versions 2.0 build20220529 through 2.0 build20231006 Description A critical issue has been found in S-CMS, affecting some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the arguments A text, A url, and A...
8.8CVSS5.4AI score0.00479EPSS
SaveExploits0References12
20