Approved changes feed: RSS · Atom
cpe:2.3:a:s-cms:s-cms:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | S Cms (5e48bb61-143e-544f-8040-f30d238b203a) |
|---|---|
| Product | S Cms (7e7e0659-f0ce-5bf0-81f6-3b8ada3458ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2023-7191 |
vulnerable | 2026-06-08 06:21:57.227984 |
S-CMS reg.php sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, was found in S-CMS up to 2.0_build20220529-20231006. This affects an unknown part of the file member/reg.php. The manipulation of the argument M_login/M_email leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier VDB-249393 was assigned to this vulnerability. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-12-31T16:00:05.206Z
Updated: 2025-04-17T19:48:09.151Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7190 |
vulnerable | 2026-06-08 06:21:57.227231 |
S-CMS sql injection
MEDIUM (5.5)
A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0_build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument A_text/A_url/A_contact leads to sql injection. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-249392. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-12-31T15:31:03.358Z
Updated: 2024-08-02T08:57:35.318Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-7189 |
vulnerable | 2026-06-08 06:21:57.225072 |
S-CMS sql injection
MEDIUM (5.5)
A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-249391. NOTE: The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2023-12-31T15:00:04.842Z
Updated: 2024-08-02T08:57:34.065Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20340 |
vulnerable | 2026-06-08 05:22:30.329288 |
Details available
A SQL injection vulnerability in the 4.edu.php\conn\function.php component of S-CMS v1.0 allows attackers to access sensitive database information.
Published: 2021-09-01T19:30:31.000Z
Updated: 2024-08-04T14:15:29.006Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-19046 |
vulnerable | 2026-06-08 05:20:57.165463 |
Details available
Cross Site Scripting (XSS) in S-CMS v1.0 allows remote attackers to execute arbitrary code via the component '/admin/tpl.php?page='.
Published: 2021-08-31T13:15:37.000Z
Updated: 2024-08-04T14:08:30.600Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9925 |
vulnerable | 2026-06-08 05:14:26.430689 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10708 |
vulnerable | 2026-06-08 05:12:25.000573 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-10237 |
vulnerable | 2026-06-08 05:12:22.829506 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20480 |
vulnerable | 2026-06-08 05:11:27.283666 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20479 |
vulnerable | 2026-06-08 05:11:27.283250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20478 |
vulnerable | 2026-06-08 05:11:27.282865 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18887 |
vulnerable | 2026-06-08 05:11:14.866936 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.