Security Advisory

CVE-2018-20018

7.5
HIGH

Vulnerability Description

S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.
Published Date December 10, 2018
Official Source NIST NVD Advisory