Approved changes feed: RSS · Atom
cpe:2.3:a:s-cms:s-cms:3.0:*:*:*:*:*:*:*
part: a version: 3.0 update: *
| Vendor | S Cms (5e48bb61-143e-544f-8040-f30d238b203a) |
|---|---|
| Product | S Cms (7e7e0659-f0ce-5bf0-81f6-3b8ada3458ae) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-20701 |
vulnerable | 2026-06-08 05:22:30.521480 |
Details available
A stored cross site scripting (XSS) vulnerability in /app/config/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
Published: 2021-07-27T22:19:31.000Z
Updated: 2024-08-04T14:22:25.443Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20700 |
vulnerable | 2026-06-08 05:22:30.521008 |
Details available
A stored cross site scripting (XSS) vulnerability in /app/form_add/of S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Title Entry text box.
Published: 2021-07-27T22:19:30.000Z
Updated: 2024-08-04T14:22:25.428Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20699 |
vulnerable | 2026-06-08 05:22:30.520591 |
Details available
A cross site scripting (XSS) vulnerability in S-CMS PHP v3.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload entered into the Copyright text box under Basic Settings.
Published: 2021-07-27T22:19:29.000Z
Updated: 2024-08-04T14:22:25.394Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20698 |
vulnerable | 2026-06-08 05:22:30.520110 |
Details available
A remote code execution (RCE) vulnerability in /1.com.php of S-CMS PHP v3.0 allows attackers to getshell via modification of a PHP file.
Published: 2021-07-27T22:19:25.000Z
Updated: 2024-08-04T14:22:25.414Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-19954 |
vulnerable | 2026-06-08 05:20:57.493038 |
Details available
An XML External Entity (XXE) vulnerability was discovered in /api/notify.php in S-CMS 3.0 which allows attackers to read arbitrary files.
Published: 2021-10-14T14:17:37.000Z
Updated: 2024-08-04T14:15:28.631Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-9040 |
vulnerable | 2026-06-08 05:14:24.907147 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-6805 |
vulnerable | 2026-06-08 05:14:13.178253 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16312 |
vulnerable | 2026-06-08 05:13:08.289399 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20477 |
vulnerable | 2026-06-08 05:11:27.280982 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20476 |
vulnerable | 2026-06-08 05:11:27.280533 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20018 |
vulnerable | 2026-06-08 05:11:26.532417 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18427 |
vulnerable | 2026-06-08 05:11:13.952294 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-18426 |
vulnerable | 2026-06-08 05:11:13.951705 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.