CVE-2026-108813

A SQL injection vulnerability exists in SEMCMS versions up to 5.0 , specifically affecting an unknown function within the SEMCMS_Download.php file. An attacker can initiate this attack remotely by performing a manipulation. The exploit is currently public . No remediation or patch information has...

EUVD-2026-97289

A vulnerability was detected in SEMCMS up to 5.0. This affects an unknown function of the file SEMCMSDownload.php. Performing a manipulation results in sql injection. It is possible to initiate the attack remotely. The exploit is now public and may be used. The vendor was contacted early about th...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...

CVE-2018-18741

CVE-2018-18741 describes a Cross-Site Scripting (XSS) vulnerability in SEMCMS 3.4, exploitable via the URI admin/SEMCMS_Download.php?lgid=1 during editing. The issue is documented across multiple sources (NVD, CNVD, CVE lists) with the impact characteristics: confidentiality impact LOW, integrity...

CVE-2018-18741: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...