696 matches found
SEMCMS SQL注入漏洞
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS 4.8 and earlier versions suffer from a SQL injection vulnerability, which stems from the application's lack of validation of external input SQL statements, and can be exploited by attackers to...
PT-2024-31854 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS versions up to 4.8 Description: A critical issue has been found, affecting the locate function of the function.php file, leading to sql injection. The attack can be launched remotely. Recommendations: For SEMCMS versions up to 4.8: Pat...
CVE-2024-32409
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-32409
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2024-32409
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
PT-2024-24553 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: An issue in SEMCMS allows a remote attacker to execute arbitrary code via a crafted script. Recommendations: For SEMCMS version 4.8, at the moment, there is no information about a newer version that contains a...
CVE-2024-32409
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-32409: Improper Neutralization of Input During Web Page Generation
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-32409
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...
CVE-2024-32409
SEMCMS version 4.8 is vulnerable to an issue that allows a remote attacker to execute arbitrary code via a crafted script. Rapid7 identifies this as a failure to properly neutralize input during web page generation. Currently, there is no information regarding a newer version that contains a fix ...
SEMCMS 安全漏洞
SEMCMS is a foreign trade website content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originates from a SQL injection vulnerability in the ID parameter of the SEMCMSUser.php component...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2024-30938
SEMCMS version 4.8 is vulnerable to a SQL Injection vulnerability (CWE-89) within the SEMCMS_User.php component. A remote attacker can exploit the ID parameter to obtain sensitive information from the system. As a temporary workaround, users should restrict access to the SEMCMS_User.php component...
CVE-2024-30938: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
PT-2024-23682 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the ID parameter in the SEMCMS User.php component. Recommendations: For SEMCMS version 4.8, avoid using the ID parameter ...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...