CVE-2018-20476

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

An issue was discovered in S-CMS 3.0. It allows XSS via the admin/demo.php T_id parameter.

Metrics

CVSS 3.0 6.1/10CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Dec 26, 2018
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2018

CVE-2018-204779.8An issue was discovered in S-CMS 3.0. It allows SQL Injection via the bank/callback1.php P_no field.CVE-2018-204787.5An issue was discovered in S-CMS 1.0. It allows reading certain files, such as PHP source code, via the admin/download.php DownName parameteCVE-2018-204799.8An issue was discovered in S-CMS 1.0. It allows SQL Injection via the wap_index.php?type=newsinfo S_id parameter.CVE-2018-204809.8An issue was discovered in S-CMS 1.0. It allows SQL Injection via the js/pic.php P_id parameter.CVE-2018-204816.5XRef::getEntry in XRef.cc in Poppler 0.72.0 mishandles unallocated XRef entries, which allows remote attackers to cause a denial of service CVE-2018-204824.7GNU Tar through 1.30, when --sparse is used, mishandles file shrinkage during read access, which allows local users to cause a denial of serCVE-2018-204837.8set_file_metadata in xattr.c in GNU Wget before 1.20.1 stores a file's origin URL in the user.xdg.origin.url metadata attribute of the extenCVE-2018-204846.1Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the self-update layout implementation.CVE-2018-204856.1Zoho ManageEngine ADSelfService Plus 5.7 before build 5702 has XSS in the employee search feature.CVE-2018-204866.1MetInfo 6.x through 6.1.3 has XSS via the /admin/login/login_check.php url_array[] parameter.CVE-2018-204878.8An issue was discovered in the firewall3 component in Inteno IOPSYS 1.0 through 3.16. The attacker must make a JSON-RPC method call to add aCVE-2018-204884.3An issue was discovered in GitLab Community and Enterprise Edition before 11.4.13, 11.5.x before 11.5.6, and 11.6.x before 11.6.1. It allows
CVE-2018-20476: Medium severity, CVSS 6.1 | Vulnix