← All advisories

Critical severity9.8NVD Advisory· Published Feb 14, 2022· Updated Jun 17, 2026

CVE-2022-23336

CVE-2022-23336

Description

S-CMS v5.0 was discovered to contain a SQL injection vulnerability in member_pay.php via the O_id parameter.

Affected products

3

S CMS/S CMS3 versions
cpe:2.3:a:s-cms:s-cms:5.0:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:a:s-cms:s-cms:5.0:*:*:*:*:*:*:*
- (no CPE)
- (no CPE)range: =5.0

Patches

Vulnerability mechanics

References

1

note.youdao.com/notesharenvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.