CVE-2022-23336

Name of the Vulnerable Software and Affected Versions S-CMS version 5.0

Description The issue is related to a SQL injection vulnerability in the member pay.php file via the O id parameter. This allows for potential exploitation by injecting malicious SQL code.

Recommendations For S-CMS version 5.0, consider restricting access to the member pay.php file or disabling the use of the O id parameter until a patch is available. Additionally, as a temporary workaround, restrict access to the vulnerable member pay.php file to minimize the risk of exploitation.