696 matches found
PT-2025-29498 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the ID parameter at the SEMCMS InquiryView.php file. Recommendations: Address the SQL injection issue by sanitizing or validating the ID parameter within th...
CVE-2025-51652
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSCategories.php...
CVE-2025-51660
SemCms v5.0 contains a SQL injection vulnerability in the lgid parameter of SEMCMS_Products.php. The issue is documented across multiple sources and is confirmed by CVE-2025-51660 with CVSSv3.1 metrics indicating a Network attack vector, Low attack complexity, Low privileges required, and impacts...
CVE-2025-51655: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...
CVE-2025-51655
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...
CVE-2025-51660: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...
CVE-2025-51659: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSProducts.php...
CVE-2025-51657: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSLink.php...
CVE-2025-51652: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSCategories.php...
CVE-2025-51656: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...
CVE-2025-51660
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSProducts.php...
CVE-2025-51658
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSInquiryView.php...
CVE-2025-51657
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMSLink.php...
CVE-2025-51656
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...
CVE-2025-51655
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...
CVE-2025-51654
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSInfocategories.php...
SEMCMS 安全漏洞
SEMCMS is SEMCMS open source content management system CMS for foreign trade websites that supports multi-language. A security vulnerability exists in SEMCMS v5.0, which originates from SQL injection of the pid parameter in SEMCMSCategories.php...
PT-2025-29497 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection issue via the lgid parameter at the SEMCMS Link.php file. Recommendations: As a temporary workaround, consider restricting access to the SEMCMS Link.php file to...
CVE-2025-51654: Improper Neutralization of Special Elements used in an SQL Command
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSInfocategories.php...
