CVE-2018-20018

S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI

published December 10, 2018

CVSS
—
EPSS
1%
Percentile
68.2
In the wild
Unconfirmed
What it is

S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01211 · 68.2th percentile
Published
2018-12-10T09:00Z
EPSS history
Timeline
  • 10 DEC 09:00Z
    S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI
    cvelistv5