An issue was discovered in S-CMS v1.5. There is a SQL injection vulnerability in search.php via the keyword parameter.