S-cms vulnerabilities

Products

• S-cms 41

Newest

• s-cms S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability. CVE-2023-29962 6.5 MediumJanuary 4, 2024
• s-cms S-CMS reg.php sql injection CVE-2023-7191 5.5 MediumDecember 31, 2023
• s-cms S-CMS sql injection CVE-2023-7190 5.5 MediumDecember 31, 2023
• s-cms S-CMS sql injection CVE-2023-7189 5.5 MediumDecember 31, 2023
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter... CVE-2023-51052 9.8 CriticalDecember 21, 2023
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter... CVE-2023-51051 9.8 CriticalDecember 21, 2023
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth... CVE-2023-51050 9.8 CriticalDecember 21, 2023
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at... CVE-2023-51049 9.8 CriticalDecember 21, 2023
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter... CVE-2023-51048 9.8 CriticalDecember 21, 2023
• s-cms S-CMS v5.0 was discovered to contain an authenticated remote code execution (RCE) vulnerability... CVE-2023-29963 7.2 HighMay 5, 2023
• s-cms S-CMS Contact Information Page cross site scripting CVE-2022-4377 3.5 LowDecember 9, 2022
• s-cms S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id... CVE-2022-23336 9.8 CriticalFebruary 14, 2022
• s-cms S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability... CVE-2020-20426 6.1 MediumDecember 22, 2021
• s-cms S-CMS Government Station Building System v5.0 contains a cross-site scripting (XSS) vulnerability... CVE-2020-20425 6.1 MediumDecember 22, 2021
• s-cms An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which... CVE-2020-19954 7.5 HighOctober 14, 2021
• s-cms cms enterprise website construction system There is an unauthorized access vulnerability in the CMS Enterprise Website Construction System 5... CVE-2021-37270 9.8 CriticalSeptember 27, 2021
• s-cms Cross Site Scripting (XSS) in S-CMS build 20191014 and earlier allows remote attackers to execute... CVE-2020-19158 5.4 MediumSeptember 15, 2021
• s-cms A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows... CVE-2020-20340 7.5 HighSeptember 1, 2021
• s-cms Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via... CVE-2020-19046 5.4 MediumAugust 31, 2021
• s-cms A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows... CVE-2020-20701 4.8 MediumJuly 27, 2021
• s-cms A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows... CVE-2020-20700 4.8 MediumJuly 27, 2021
• s-cms A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute... CVE-2020-20699 4.8 MediumJuly 27, 2021
• s-cms A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to... CVE-2020-20698 7.2 HighJuly 27, 2021
• s-cms S-CMS v1.5 has XSS in tpl.php via the member/member_login.php from parameter. CVE-2019-17368 6.1 MediumOctober 9, 2019
• s-cms s-cms V3.0 has XSS in index.php?type=text via the S_id parameter. CVE-2019-16312 6.1 MediumSeptember 14, 2019
• s-cms S-CMS PHP v1.0 has SQL injection via the 4/js/scms.php?action=unlike id parameter. CVE-2019-10708 Public exploit 9.8 CriticalApril 2, 2019
• s-cms S-CMS PHP v1.0 has a CSRF vulnerability to add a new admin user via the 4.edu.php/admin/ajax.php... CVE-2019-10237 8.8 HighMarch 27, 2019
• s-cms S-CMS PHP v1.0 has XSS in 4.edu.php via the S_id parameter. CVE-2019-9925 6.1 MediumMarch 22, 2019
• s-cms S-CMS PHP v3.0 has a CSRF vulnerability to add a new admin user via the admin/ajax.php?type=admin... CVE-2019-9040 8.8 HighFebruary 23, 2019
• s-cms SQL Injection was found in S-CMS version V3.0 via the alipay/alipayapi.php O_id parameter. CVE-2019-6805 9.8 CriticalJanuary 25, 2019
• s-cms An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter. CVE-2018-20480 9.8 CriticalDecember 26, 2018
• s-cms An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo... CVE-2018-20479 9.8 CriticalDecember 26, 2018
• s-cms An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code,... CVE-2018-20478 7.5 HighDecember 26, 2018
• s-cms An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field. CVE-2018-20477 9.8 CriticalDecember 26, 2018
• s-cms An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter. CVE-2018-20476 6.1 MediumDecember 26, 2018
• s-cms S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo... CVE-2018-20018 7.5 HighDecember 10, 2018
• s-cms An issue was discovered in S-CMS v1.5. There is a CSRF vulnerability that can add a new user via... CVE-2018-19332 8.8 HighNovember 17, 2018
• s-cms An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via... CVE-2018-19331 7.5 HighNovember 17, 2018
• s-cms An issue was discovered in S-CMS v1.5. There is an XSS vulnerability in search.php via the... CVE-2018-19145 6.1 MediumNovember 9, 2018
• s-cms S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type... CVE-2018-18887 9.8 CriticalNovember 1, 2018
• s-cms s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member... CVE-2018-18427 9.8 CriticalOctober 17, 2018
• s-cms s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted... CVE-2018-18426 8.8 HighOctober 17, 2018