CVE-2018-20018
S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.
Published: 2018-12-10 · CVSS: Unscored
S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7