QQ704568679/-

Releases0

Stars2

代码审计

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2018-20018 ↗	Dec 10, 2018Monday, 10 December 2018, 09:29	—	5 MEDIUM
S-CMS V3.0 has SQL injection via the S_id parameter, as demonstrated by the /1/?type=productinfo&S_id=140 URI.
CVE-2018-8761 ↗	Mar 19, 2018Monday, 19 March 2018, 14:29	—	5 MEDIUM
protected\apps\member\controller\shopcarController.php in Yxcms building system (compatible cell phone) v1.4.7 has a logic flaw allowing attackers to modify a price, before form submission, by observing data in a packet capture.