CVE-2019-17368

Name of the Vulnerable Software and Affected Versions S-CMS version 1.5

Description The issue concerns a security problem where an attacker can execute malicious scripts. This is achieved by exploiting the member login.php parameter in the tpl.php file.

Recommendations For S-CMS version 1.5, consider restricting access to the tpl.php file or the member login.php parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the vulnerable parameter in the affected API endpoint until the issue is resolved.