Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
s-cms s-cms 5.0 vulnerabilities and exploits
(subscribe to this query)
6.5
CVSSv3
CVE-2023-29962
S-CMS v5.0 exists to contain an arbitrary file read vulnerability.
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2023-51048
S-CMS v5.0 exists to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2023-51049
S-CMS v5.0 exists to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2023-51050
S-CMS v5.0 exists to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2023-51051
S-CMS v5.0 exists to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2023-51052
S-CMS v5.0 exists to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.
S-cms S-cms 5.0
7.2
CVSSv3
CVE-2023-29963
S-CMS v5.0 exists to contain an authenticated remote code execution (RCE) vulnerability via the component /admin/ajax.php.
S-cms S-cms 5.0
5.4
CVSSv3
CVE-2022-4377
A vulnerability was found in S-CMS 5.0 Build 20220328. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component Contact Information Page. The manipulation of the argument Make a Call leads to cross site scripting. The attack...
S-cms S-cms 5.0
9.8
CVSSv3
CVE-2022-23336
S-CMS v5.0 exists to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.