PatchTheCVE: s-cmshttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2023-29962: S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability.https://patchthecve.com/cve/CVE-2023-29962.htmlhttps://patchthecve.com/cve/CVE-2023-29962.htmlWed, 17 Jun 2026 05:51:07 +0000MEDIUM 6.5: S-CMS v5.0 was discovered to contain an arbitrary file read vulnerability.CVE-2023-7191: A vulnerability, which was classified as critical, was found in S-CMS up to 2.0_build20220529-20231006https://patchthecve.com/cve/CVE-2023-7191.htmlhttps://patchthecve.com/cve/CVE-2023-7191.htmlWed, 17 Jun 2026 06:52:16 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, was found in S-CMS up to 2.0_build20220529-20231006. This affects an unknown part of the file member/reg.php. The manipulation of the argument M_login/M_email leads to sql injection. The exploit has been disclosed to the public and may be used. The CVE-2023-7190: A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0_build20220529-20231006https://patchthecve.com/cve/CVE-2023-7190.htmlhttps://patchthecve.com/cve/CVE-2023-7190.htmlWed, 17 Jun 2026 06:52:16 +0000MEDIUM 5.5: A vulnerability, which was classified as critical, has been found in S-CMS up to 2.0_build20220529-20231006. Affected by this issue is some unknown functionality of the file /member/ad.php?action=ad. The manipulation of the argument A_text/A_url/A_contact leads to sql injection. The exploit has beenCVE-2023-7189: A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006https://patchthecve.com/cve/CVE-2023-7189.htmlhttps://patchthecve.com/cve/CVE-2023-7189.htmlWed, 17 Jun 2026 06:52:16 +0000MEDIUM 5.5: A vulnerability classified as critical was found in S-CMS up to 2.0_build20220529-20231006. Affected by this vulnerability is an unknown functionality of the file /s/index.php?action=statistics. The manipulation of the argument lid leads to sql injection. The exploit has been disclosed to the publicCVE-2023-51052: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajaxhttps://patchthecve.com/cve/CVE-2023-51052.htmlhttps://patchthecve.com/cve/CVE-2023-51052.htmlWed, 17 Jun 2026 06:40:28 +0000CRITICAL 9.8: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_formauth parameter at /admin/ajax.php.CVE-2023-51051: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajaxhttps://patchthecve.com/cve/CVE-2023-51051.htmlhttps://patchthecve.com/cve/CVE-2023-51051.htmlWed, 17 Jun 2026 06:40:27 +0000CRITICAL 9.8: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_textauth parameter at /admin/ajax.php.CVE-2023-51050: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ahttps://patchthecve.com/cve/CVE-2023-51050.htmlhttps://patchthecve.com/cve/CVE-2023-51050.htmlWed, 17 Jun 2026 06:40:27 +0000CRITICAL 9.8: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_productauth parameter at /admin/ajax.php.CVE-2023-51049: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.https://patchthecve.com/cve/CVE-2023-51049.htmlhttps://patchthecve.com/cve/CVE-2023-51049.htmlWed, 17 Jun 2026 06:40:27 +0000CRITICAL 9.8: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_bbsauth parameter at /admin/ajax.php.CVE-2023-51048: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajaxhttps://patchthecve.com/cve/CVE-2023-51048.htmlhttps://patchthecve.com/cve/CVE-2023-51048.htmlWed, 17 Jun 2026 06:40:27 +0000CRITICAL 9.8: S-CMS v5.0 was discovered to contain a SQL injection vulnerability via the A_newsauth parameter at /admin/ajax.php.