587 matches found
SEMCMS File Upload Vulnerability
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A file upload vulnerability exists in SEMCMS version 3.9, which stems from the application's lack of effective validation of uploaded files and can be exploited by an attacker to run arbitrary code via...
CVE-2020-23564
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMSUpfile.php...
Unrestricted file upload
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMSUpfile.php...
CVE-2020-23564
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMSUpfile.php...
PT-2023-11650 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.9 Description: The issue allows remote attackers to run arbitrary code. This is achieved via the SEMCMS Upfile.php file, which is vulnerable to file upload attacks. Recommendations: For SEMCMS version 3.9, consider disabling...
CVE-2020-23564
SEMCMS 3.9 is affected by a file upload vulnerability in SEMCMS_Upfile.php that can allow remote attackers to run arbitrary code. Root cause cited: lack of proper validation of uploaded files. Impact per sources is arbitrary code execution (high severity). Remediation: as a temporary workaround, ...
CVE-2020-23564
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMSUpfile.php...
SEMCMS SQL Injection Vulnerability (CNVD-2023-62957)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS version 1.5 suffers from a SQL injection vulnerability, which originates from the lack of validation of external input SQL statements in the parameter id of /AntSuxin.php, which can be exploited b...
CVE-2023-37647
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
CVE-2023-37647
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
Sql injection
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
CVE-2023-37647
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
CVE-2023-37647
Summary: CVE-2023-37647 affects SEMCMS v1.5, with a SQL injection vulnerability exploitable via the id parameter in the /Ant_Suxin.php endpoint. The issue is documented across multiple sources (including CNVD, NVD, Red Hat, and CVE lists) and has a high/critical impact rating (CVSS 3.1: AV:N/AC:L...
CVE-2023-37647
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...
SEMCMS code problem vulnerability
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A code issue vulnerability exists in SEMCMS PHP version 3.7, which can be exploited by remote attackers to upload arbitrary files and gain escalated privileges...
CVE-2020-18432
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges...
Unrestricted file upload
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges...
CVE-2020-18432
CVE-2020-18432 : SEMCMS PHP version 3.7 contains a code issue that allows remote attackers to upload arbitrary files and gain escalated privileges. The available connected documents confirm the vulnerability name, affected software, and the impact (remote arbitrary file upload with elevated privi...