← All advisories

Critical severity9.8NVD Advisory· Published Nov 1, 2018· Updated Jun 17, 2026

CVE-2018-18887

CVE-2018-18887

Description

S-CMS PHP 1.0 has SQL injection in member/member_news.php via the type parameter (aka the $N_type field).

Affected products

1

PHP CMS/PHP-CMSllm-fuzzy
Range: <=1.0

Patches

Vulnerability mechanics

References

1

www.iwantacve.cn/index.php/archives/75/nvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.