CVE-2021-38728

CVE-2021-38728 affects SEMCMS SHOP v1.1, with a stored/reflected Cross-Site Scripting (XSS) vulnerability in Ant_M_Coup.php. The available sources indicate the issue resides in a web-exposed component, enabling an attacker to inject scripts that may be executed in a user’s browser, given network ...

CVE-2021-38737

SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...

CVE-2021-38217

SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...

CVE-2021-38737

SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...

CVE-2021-38734

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...

CVE-2021-38728

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

CVE-2021-38731

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...

CVE-2021-38736

SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...

PT-2022-10762 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Zekou.php file. Recommendations: For SEMCMS SHOP version 1.1, update to a version that fixes the SQL Injection issue in Ant Zekou.php, if available. As a...

PT-2022-10761 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection, which can be exploited via the Ant Info.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Info.php file as a temporary...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntPro.php. An attacker can use this vulnerability to...

CVE-2021-38732

SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...

CVE-2021-38733

CVE-2021-38733 affects SEMCMS SHOP v1.1 with a SQL injection in Ant_BlogCat.php. All sources indicate a high-severity vulnerability (CVSS 3.1: 9.8) potentially allowing unauthorized database access without authentication. The connected documents do not provide exploit details or confirmed in-the-...

PT-2022-10764 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant BlogCat.php file. This allows for potential exploitation of the database. No information is provided about the estimated number of potentially affected...

CVE-2021-38217

SEMCMS 1.2 is affected by a SQL Injection vulnerability in SEMCMS_User.php. The issue, documented across multiple sources (CVE-2021-38217), is classified with CVSSv3.1 base score 9.8 (CRITICAL) and is exploitable remotely without privileges or user interaction. The vulnerability stems from input ...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntMessage.php...

CVE-2021-38733

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntGlobal.php...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.2, which stems from a SQL injection issue in SEMCMSUser.php...

CVE-2021-38729

CVE-2021-38729 affects SEMCMS SHOP version 1.1. The vulnerability is a SQL Injection in Ant_Plist.php, with CVSS v3.1 base score 9.8 (CRITICAL). Public references indicate a PoC exists and potential exploitation; details in the Adp entry note a total technical impact. Pending remediation: PT-2022...