CVE-2018-19925

An issue was discovered in Sales & Company Management System (SCMS) through 2018-06-06. It has SQL injection via the member/member_order.php type parameter, related to the O_state parameter.

Score

CVSS 3.0 9.8 Critical

Status

Modified - cve@mitre.org

Published

2018-12-06

Last modified

2024-09-17

Weaknesses

CWE-89

Affected products

• Sales & Company Management System (Sales & Company Management System Project)

References

• https://github.com/Venan24/SCMS/issues/3