CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36800

A SQL injection vulnerability exists in SEMCMS version 4.8 . The flaw is caused by the improper neutralization of special elements used in an SQL command, specifically via the ID parameter in the Download.php file. A remote attacker can exploit this to obtain sensitive information . Remediation i...