CVE-2023-7190

Summary

CVE-2023-7190 is a newly disclosed critical vulnerability affecting S-CMS versions up to 2.0_build20220529-20231006. This issue lies in some unknown functionality of the file /member/ad.php?action=ad, allowing an attacker to perform SQL injection by manipulating the arguments A_text, A_url, or A_contact. The exploit for this vulnerability has been made public, increasing the risk of attacks. The identifier for this vulnerability is VDB-249392, and despite early disclosure to the vendor, they have not responded.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.