Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2023-11701
HistoryOct 31, 2022 - 12:00 a.m.

SEMCMS Ant_Pro.php SQL Injection Vulnerability

2022-10-3100:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
semcms
foreign trade
web content management
sql injection
vulnerability
validation
ant_pro.php
illegal commands
database theft
security issue

EPSS

0.002

Percentile

52.3%

SEMCMS is a foreign trade web content management system (CMS) that supports multiple languages. SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in Ant_Pro.php. An attacker can use this vulnerability to execute illegal SQL commands to steal database data.

EPSS

0.002

Percentile

52.3%

Related for CNVD-2023-11701