Lucene search
+L

400 matches found

CNVD
CNVD
added 2019/09/23 12:0 a.m.2 views

S-CMS php version hospital website building system v1.0 backend aj***.php S**_sh*** parameter has SQL injection vulnerability

S-CMS Hospital Station Building System with applet is developed with php+mysql, which is easy and convenient to operate. S-CMS php version of the hospital building system v1.0 background aj.php Ssh parameter SQL injection vulnerability, attackers are able to exploit the vulnerability to obtain...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/09/21 12:0 a.m.3 views

S-CMS e-commerce system aj***.php page L_f*** parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Lf parameter exists SQL injection vulnerability, an attacker can use the vulnerability to obtain database sensitive information...

7.9AI score
Exploits0
NVD
NVD
added 2019/09/14 4:15 p.m.51 views

CVE-2019-16312

s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...

6.1CVSS6AI score0.00818EPSS
Exploits1References1
OSV
OSV
added 2019/09/14 4:15 p.m.6 views

CVE-2019-16312

s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...

6.1CVSS6.4AI score0.00818EPSS
Exploits1References1
Prion
Prion
added 2019/09/14 4:15 p.m.24 views

Design/Logic Flaw

s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...

4.3CVSS6AI score0.00818EPSS
Exploits1References1Affected Software1
CVE
CVE
added 2019/09/14 3:22 p.m.62 views

CVE-2019-16312

CVE-2019-16312 affects s-cms v3.0 with a stored/reflected XSS in index.php?type=text via the S_id parameter. The Red Hat and NVD entries confirm the same description; public details are limited to the XSS path and parameter, with no explicit exploitation vectors or patched versions provided in th...

6.1CVSS6AI score0.00818EPSS
Exploits1References1Affected Software1
Cvelist
Cvelist
added 2019/09/14 3:22 p.m.53 views

CVE-2019-16312

s-cms V3.0 has XSS in index.php?type=text via the Sid parameter...

6.1AI score0.00818EPSS
Exploits1References1
CNVD
CNVD
added 2019/09/10 12:0 a.m.6 views

S-CMS e-commerce system aj***.php page M_fen parameter has SQL injection vulnerability

S-CMS e-commerce system is an e-commerce software. S-CMS e-commerce system aj.php page Mfen parameter SQL injection vulnerability, an attacker can use the vulnerability to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/09/09 12:0 a.m.4 views

SQL injection vulnerability in the C***_fi*** parameter of aj***.php page in the background of S-CMS government website system.

S-CMS is a content management system CMS based on PHP and MySQL. There is a SQL injection vulnerability in the Cfi parameter of the aj.php page in the background of the S-CMS government website building system, which can be exploited by an attacker to obtain sensitive information from the databas...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/09/06 12:0 a.m.3 views

S-CMS hospital website building system backend a***.php suffers from SQL injection vulnerability

S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background a.php SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/09/06 12:0 a.m.1 views

S-CMS hospital website building system background a***.php G_sh parameter has SQL injection vulnerability

S-CMS hospital station building system is developed by php+mysql, easy to operate, convenient, support PC+Mobile+WeChat. S-CMS hospital building system background a.php Gsh parameters exist SQL injection vulnerability, attackers can use the vulnerability to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/08/27 12:0 a.m.4 views

S-CMS enterprise website builder system backend F_qs*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Fqs parameter in the background of S-CMS enterprise website building system. Attackers...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/27 12:0 a.m.4 views

S-CMS enterprise website builder system backend P_br*** parameter exists SQL injection vulnerability

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the Pbr parameter in the background of S-CMS enterprise website building system. Attackers...

7.7AI score
Exploits0
CNVD
CNVD
added 2019/08/22 12:0 a.m.2 views

S-CMS Enterprise Station Building System v3.0 SQL Injection Vulnerability in Background

S-CMS enterprise station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. S-CMS v3.0 background SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

7.8AI score
Exploits0
CNVD
CNVD
added 2019/08/20 12:0 a.m.4 views

SQL Injection Vulnerability in the Frontend of S-CMS Enterprise Website Building System (CNVD-2019-30292)

S-CMS Enterprise Station System is a mature and perfect enterprise station CMS system. S-CMS Enterprise Station System has a SQL injection vulnerability in the frontend, which can be exploited by attackers to obtain database information...

8AI score
Exploits0
CNVD
CNVD
added 2019/08/16 12:0 a.m.4 views

SQL injection vulnerability in the front-end am***.php page of S-CMS school website builder system

S-CMS school station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise station building solutions for the product. There is a SQL injection vulnerability in the front-end am.php page of S-CMS School Building System. Attackers can use the vulnerability...

7.7AI score
Exploits0
GithubExploit
GithubExploit
added 2019/08/14 7:15 a.m.137 views

Exploit for SQL Injection in S-Cms

Scms – SQL Injection exploit.py is a PoC for the CVE-2019-...

9.8CVSS7.4AI score0.02638EPSS
Exploits2
CNVD
CNVD
added 2019/08/08 12:0 a.m.3 views

XML Entity Injection Vulnerability in S-CMS

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS has an XML entity injection vulnerability that can be exploited by attackers to obtain sensitive information...

7.3AI score
Exploits0
CNVD
CNVD
added 2019/08/08 12:0 a.m.3 views

S-CMS in***.php page suffers from a SQL injection vulnerability

S-CMS is Zibo Shining Network Technology Co., Ltd. developed a solution for enterprise station-building products. S-CMS in.php page has a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information...

7.9AI score
Exploits0
CNVD
CNVD
added 2019/08/07 12:0 a.m.2 views

S-cms Government Website Building System suffers from SQL Injection Vulnerability

S-CMS government station building system is Zibo Shining Network Technology Co., Ltd. developed a specialized enterprise to provide solutions for station building products. S-cms government website builder system has SQL injection vulnerability, attackers can use the vulnerability to obtain...

7.9AI score
Exploits0
Rows per page
Query Builder