CVE-2021-38732

SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...

CVE-2021-38728

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

CVE-2021-38734

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...

CVE-2022-2726

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

Sql injection

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2022-2726 SEMCMS Ant_Check.php sql injection

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2022-2726

CVE-2022-2726 concerns SEMCMS. A SQL injection vulnerability exists in an unknown part of Ant_Check.php triggered by manipulating the DID parameter, with remote exploitation claimed. Multiple connected sources corroborate a critical severity and public exploit disclosure, affecting SEMCMS via Ant...

PT-2022-18336 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS affected versions not specified Description: A critical vulnerability has been found in SEMCMS, affecting an unknown part of the file Ant Check.php. The manipulation of the DID argument leads to sql injection. It is possible to initiat...

SEMCMS Access Control Error Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS is vulnerable to an access control error that originates from a vulnerability in /include/webcheck.php, which can be exploited to reset the password of the administrator account...

SEMCMS SQL Injection Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS suffers from an Access Control Error vulnerability, which stems from a vulnerability found in the checkuser function, which can be exploited by an attacker to obtain passwords in plaintext via a S...

CVE-2020-18078

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

Design/Logic Flaw

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

Design/Logic Flaw

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18081

The CVE-2020-18081 entry concerns SEMCMS 3.8, where the checkuser function is vulnerable to an access-control/SQL query flaw that can disclose plaintext passwords. The vulnerability allows an attacker to obtain passwords via a crafted SQL query, with network access and no authentication required ...

CVE-2020-18078

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

CVE-2020-18078

CVE-2020-18078 affects SEMCMS v3.8 via a vulnerability in /include/web_check.php that allows resetting the Administrator password. Implementations in multiple feeds confirm the root cause as an access/verification issue within that script, leading to an account takeover risk for the admin account...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS suffers from an Access Control Error vulnerability, which stems from a vulnerability found in the checkuser function, which can be exploited by an attacker to obtain passwords in plaintext via a S...