PT-2018-15404

Name of the Vulnerable Software and Affected Versions S-CMS version 1.0 Description The issue allows SQL Injection via the "wap index.php?type=newsinfo" API endpoint, specifically through the S id parameter. Recommendations For S-CMS version 1.0, avoid using the S id parameter in the "wap...

CVE-2008-6958: Improper Control of Generation of Code

wap/index.php in Crossday Discuz! Board 6.x and 7.x allows remote authenticated users to execute arbitrary PHP code via the creditsformula parameter...