CVE-2018-18427

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...

CVE-2018-18427

CVE-2018-18427 affects s-cms 3.0. The vulnerability is a SQL injection in the web app, exploitable via the parameter 0_id in member/post.php or via POST data to member/member_login.php. The issue is triggered by unsafely handled input, enabling an attacker to manipulate SQL queries. The CVE entry...

CVE-2018-18427

s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...