Lucene search
K

400 matches found

Prion
Prion
added 2023/12/31 4:15 p.m.28 views

Sql injection

A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument Atext/Aurl/Acontact leads to sql injection. The exploit has been...

5.2CVSS7.5AI score0.00479EPSS
Exploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/12/31 4:0 p.m.8 views

CVE-2023-7191 S-CMS reg.php sql injection

A vulnerability, which was classified as critical, was found in S-CMS up to 2.0build20220529-20231006. This affects an unknown part of the file member/reg.php. The manipulation of the argument Mlogin/Memail leads to sql injection. The exploit has been disclosed to the public and may be used. The...

5.5CVSS6.6AI score0.00479EPSS
Exploits0References3
Cvelist
Cvelist
added 2023/12/31 4:0 p.m.26 views

CVE-2023-7191 S-CMS reg.php sql injection

A vulnerability, which was classified as critical, was found in S-CMS up to 2.0build20220529-20231006. This affects an unknown part of the file member/reg.php. The manipulation of the argument Mlogin/Memail leads to sql injection. The exploit has been disclosed to the public and may be used. The...

5.5CVSS9.1AI score0.00479EPSS
Exploits0References3
CVE
CVE
added 2023/12/31 4:0 p.m.64 views

CVE-2023-7191

CVE-2023-7191 : S-CMS (PHP/MySQL) up to version 2.0_build20220529-20231006 contains a SQL injection in the file component member/reg.php. The root cause is manipulation of the arguments M_login/M_email, enabling potentially arbitrary SQL execution. Multiple connected sources confirm the vulnerabi...

8.8CVSS7.3AI score0.00479EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/12/31 3:31 p.m.22 views

CVE-2023-7190 S-CMS sql injection

A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument Atext/Aurl/Acontact leads to sql injection. The exploit has been...

5.5CVSS9AI score0.00479EPSS
Exploits0References3
CVE
CVE
added 2023/12/31 3:31 p.m.60 views

CVE-2023-7190

CVE-2023-7190 affects S-CMS prior to or including version 2.0_build20220529-20231006. The vulnerability arises from an SQL injection in the unknown function of /member/ad.php?action=ad, triggered by manipulating the A_text/A_url/A_contact parameters. Public exploitation has been disclosed. The ve...

8.8CVSS7.3AI score0.00479EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2023/12/31 3:15 p.m.7 views

CVE-2023-7189

A vulnerability classified as critical was found in S-CMS up to 2.0build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the publ...

8.8CVSS5.5AI score0.00479EPSS
Exploits0References3
NVD
NVD
added 2023/12/31 3:15 p.m.14 views

CVE-2023-7189

A vulnerability classified as critical was found in S-CMS up to 2.0build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the publ...

8.8CVSS0.00479EPSS
Exploits0References3
Prion
Prion
added 2023/12/31 3:15 p.m.28 views

Sql injection

A vulnerability classified as critical was found in S-CMS up to 2.0build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the publ...

5.2CVSS7.6AI score0.00479EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/12/31 3:0 p.m.16 views

CVE-2023-7189 S-CMS sql injection

A vulnerability classified as critical was found in S-CMS up to 2.0build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the publ...

5.5CVSS9.2AI score0.00479EPSS
Exploits0References3
CVE
CVE
added 2023/12/31 3:0 p.m.59 views

CVE-2023-7189

CVE-2023-7189 affects S-CMS up to 2.0_build20220529-20231006. The vulnerability lies in an unknown function in /s/index.php?action=statistics where manipulating the lid argument enables SQL injection. The exploit has been disclosed publicly; vendor response was not provided in the documents. Expl...

8.8CVSS7.4AI score0.00479EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2023/12/31 12:0 a.m.5 views

S-CMS SQL Injection Vulnerability

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A SQL injection vulnerability exists in S-CMS version 2.0build20220529-20231006 and earlier versions, which originates from a problem with the unknown function of /member/ad.php?action=ad...

8.8CVSS7.9AI score0.00479EPSS
Exploits0References4
Positive Technologies
Positive Technologies
added 2023/12/31 12:0 a.m.5 views

PT-2023-32933 · S Cms · S-Cms

Name of the Vulnerable Software and Affected Versions: S-CMS versions up to 2.0 build20220529-20231006 Description: A critical vulnerability was found in S-CMS, affecting an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the lid argument leads to SQL...

8.8CVSS6.3AI score0.00479EPSS
Exploits0References10
CNNVD
CNNVD
added 2023/12/31 12:0 a.m.5 views

S-CMS SQL Injection Vulnerability

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS, China. A SQL injection vulnerability exists in S-CMS version 2.0build20220529-20231006 and earlier versions, which originates from a problem with an unknown function in /s/index.php?action=statistics...

8.8CVSS7.9AI score0.00479EPSS
Exploits0References4
CNNVD
CNNVD
added 2023/12/31 12:0 a.m.6 views

S-CMS SQL Injection Vulnerability

S-CMS is a PHP and MySQL based Content Management System CMS from S-CMS China. A SQL injection vulnerability exists in S-CMS version 2.0build20220529-20231006 and earlier versions, which stems from a problem with an unknown function in member/reg.php...

8.8CVSS7.9AI score0.00479EPSS
Exploits0References4
NVD
NVD
added 2023/12/21 4:15 p.m.18 views

CVE-2023-51050

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aproductauth parameter at /admin/ajax.php...

9.8CVSS0.00534EPSS
Exploits0References1
OSV
OSV
added 2023/12/21 4:15 p.m.6 views

CVE-2023-51051

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Atextauth parameter at /admin/ajax.php...

9.8CVSS5.8AI score0.00534EPSS
Exploits0References1
OSV
OSV
added 2023/12/21 4:15 p.m.5 views

CVE-2023-51050

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aproductauth parameter at /admin/ajax.php...

9.8CVSS5.8AI score0.00534EPSS
Exploits0References1
OSV
OSV
added 2023/12/21 4:15 p.m.7 views

CVE-2023-51052

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aformauth parameter at /admin/ajax.php...

9.8CVSS5.8AI score0.00534EPSS
Exploits0References1
NVD
NVD
added 2023/12/21 4:15 p.m.15 views

CVE-2023-51052

S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the Aformauth parameter at /admin/ajax.php...

9.8CVSS0.00534EPSS
Exploits0References1
Rows per page
Query Builder