CVSS: 6.1EPSS: 0%CPEs: 1EXPL: 3CVE-2010-4772 – S_CMS 2.5 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2010-4772
23 Mar 2011 — Cross-site scripting (XSS) vulnerability in blocks/lang.php in S-CMS 2.5 allows remote attackers to inject arbitrary web script or HTML via the id parameter to viewforum.php. Vulnerabilidad de secuencias de comandos en sitios cruzados (XSS) en bloques/lang.php de S-CMS 2.5 permite a atacantes remotos inyectar codigo de script web o código HTML a través del parámetro id de viewforum.php. • https://www.exploit-db.com/exploits/15588 • CWE-79: Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') •
CVSS: 9.8EPSS: 0%CPEs: 1EXPL: 3CVE-2010-4771 – S_CMS 2.5 - Multiple Vulnerabilities
https://notcve.org/view.php?id=CVE-2010-4771
23 Mar 2011 — SQL injection vulnerability to viewforum.php in S-CMS 2.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Vulnerabilidad de inyección SQL en viewforum.php de S-CMS 2.5 permite a atacantes remotos ejecutar comandos SQL de su elección a través del parámetro id. • https://www.exploit-db.com/exploits/15588 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •