4 matches found
CVE-2018-19925
An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...
9.8CVSS9.8AI score0.01135EPSS
SaveExploits1References1
Sql injection
An issue was discovered in Sales & Company Management System SCMS through 2018-06-06. It has SQL injection via the member/memberorder.php type parameter, related to the Ostate parameter...
7.5CVSS9.7AI score0.01135EPSS
SaveExploits1References1Affected Software1
CVE-2018-19925
CVE-2018-19925 affects the Sales & Company Management System (SCMS) up to 2018-06-06, with a SQL injection vulnerability in the member/member_order.php endpoint via the type parameter and related to O_state. Multiple connected sources (RH, CNVD, NVD, CVE listings) corroborate an SQL injection tha...
9.8CVSS9.7AI score0.01135EPSS
SaveExploits1References1Affected Software1
20