477 matches found
CVE-2018-18427
CVE-2018-18427 affects s-cms 3.0. The vulnerability is a SQL injection in the web app, exploitable via the parameter 0_id in member/post.php or via POST data to member/member_login.php. The issue is triggered by unsafely handled input, enabling an attacker to manipulate SQL queries. The CVE entry...
CVE-2018-18427
s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...
CVE-2018-18426: Improper Control of Generation of Code
s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter...
PT-2018-14453
Name of the Vulnerable Software and Affected Versions s-cms version 3.0 Description The issue allows remote attackers to execute arbitrary PHP code. This can be achieved by placing the malicious code in a crafted User-agent Disallow value in the robots.php txt parameter. Recommendations For s-cms...
CVE-2018-18427: Improper Neutralization of Special Elements used in an SQL Command
s-cms 3.0 allows SQL Injection via the member/post.php 0id parameter or the POST data to member/memberlogin.php...
PT-2018-14454
Name of the Vulnerable Software and Affected Versions s-cms version 3.0 Description The issue allows for SQL Injection, which can be exploited via the "0 id" parameter in the "member/post.php" endpoint or through the POST data sent to the "member/member login.php" endpoint. Recommendations For...
SQL Injection Vulnerability in the User Information Modification Interface of S-CMS School Building System
S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. A SQL injection vulnerability exists in the user information modification interface of S-CMS. An attacker can exploit the vulnerability ...
Authentication Bypass Vulnerability in S-CMS Backend
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is an authentication bypass vulnerability in the S-CMS backend and two sensitive files. The vulnerability is caused by the system's failure to accurately verify cookie information, and an attacker...
Arbitrary User Login Vulnerability in S-CMS Frontend
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. There is an arbitrary user login vulnerability in the frontend of S-CMS. The vulnerability stems from the failure of the program to filter the data submitted by the user, an attacker can use the...
Override Access Vulnerability in S-CMS V3.0 dbm.asp Page
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 dbm.asp page has an override access vulnerability that can be exploited by an attacker to bypass Cookies authentication, execute arbitrary sql statements, and obtain the administrator's passwo...
S-CMS V3.0 build20170601 has an arbitrary file download vulnerability
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. S-CMS V3.0 build20170601 '/admin/download.asp' page has an arbitrary file download vulnerability, allowing attackers to exploit the vulnerability to download database information...
S-CMS newsview.asp page has a SQL injection vulnerability in the n_id parameter.
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A SQL injection vulnerability exists in the S-CMS newsview.asp page. The lack of filtering of the 'nid' parameter allows an attacker to exploit the vulnerability to obtain sensitive database information...
Reflective Cross-site Scripting Vulnerability in S-CMS Enterprise Website Builder System
S-CMS is a corporate website building system developed by Zibo Shining Network Technology Co. A reflective cross-site scripting vulnerability exists in S-CMS. Due to insufficient filtering of user input, the program allows attackers to construct malicious web pages and induce users to parse and...
Stored Cross-site Scripting Vulnerability in s-cms Website Builder System
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. A stored cross-site scripting vulnerability exists in the S-CMS website builder system. Due to the lack of filtering on the /member/memberreg.asp page, an attacker can launch a...
Default Backdoor Vulnerability in s-cms Website Builder System
S-CMS is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions to build a station of the product. There is a default backdoor vulnerability in s-cms website builder system. Allow attackers to directly obtain site or server permissions...
Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability
Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...
Y-R-S CMS 2015Q4 - (ID) SQL Injection Web Vulnerability
Document Title: =============== Y-R-S CMS 2015Q4 - ID SQL Injection Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1644 Release Date: ============= 2015-11-17 Vulnerability Laboratory ID VL-ID: ==================================== 1644...
s-cms 2.5 - Multiple Vulnerabilities
No description provided by source. ============================================================ Exploit Title: S-CMS Multiple Vuln Date: 14/11/2010 Author: LordTittiS Greetings To: GodOfPain, SystemOveride Software Link: http://www.matteoiammarrone.com http://www.matteoiammarrone.com/public/s-cms...
S-CMS <= 2.0b3 (username) Blind SQL Injection Exploit
No description provided by source. !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...
S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities
No description provided by source. || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------...