Search vulnerabilities

Results 42

Export CSV
CVE-2018-18427

s-cms 3.0 allows SQL Injection via the member/post.php 0_id parameter or the POST data to member/member_login.php.

CVSS 3.0 · 9.8 Critical EPSS 1.2% KEV · Not listed
Vendors
Products
CVE-2018-18426

s-cms 3.0 allows remote attackers to execute arbitrary PHP code by placing this code in a crafted User-agent Disallow value in the robots.php txt parameter.

CVSS 3.0 · 8.8 High EPSS 2.4% KEV · Not listed
Vendors
Products