CVE-2024-28405

SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMSFuntion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges...

CVE-2024-28405

SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMSFuntion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges...

CVE-2024-25422

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

Sql injection

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

CVE-2024-25422: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

PT-2024-20935

Name of the Vulnerable Software and Affected Versions SEMCMS version 4.8 Description The issue allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS Menu.php component. This is a SQL Injection vulnerability. Recommendations For SEMCMS version 4.8, upda...

CVE-2024-25422

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

CVE-2024-25422

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

SEMCMS Security Breach

SEMCMS is a multilingual content management system CMS for foreign trade websites. A security vulnerability exists in SEMCMS v.4.8, which originates from an SQL injection vulnerability. The vulnerability can be exploited to execute arbitrary code and obtain sensitive information via the...

CVE-2024-25422

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMSMenu.php component...

CVE-2024-25422

The CVE-2024-25422 entry concerns a SQL injection vulnerability in SEMCMS v.4.8. The issue affects the SEMCMS_Menu.php component and could allow a remote attacker to execute arbitrary code and access sensitive information. Several connected sources consistently describe this flaw as SQL injection...

SEMCMS SQL Injection Vulnerability (CNVD-2024-06232)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS v4.8, which originates from the lack of validation of externally entered SQL statements via the languageID parameter in /webinc.php. The vulnerability can b...

CVE-2023-48864

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

CVE-2023-48864

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

Sql injection

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

CVE-2023-48864

CVE-2023-48864 affects SEMCMS v4.8, where a SQL injection is possible via the languageID parameter in the /web_inc.php endpoint. The vulnerability description is consistently reported across multiple sources; no explicit exploit details or confirmed fixes are provided in the connected documents. ...

CVE-2023-48864: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

CVE-2023-48864

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

CVE-2023-48864

SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /webinc.php...

PT-2024-13655 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: A SQL injection issue was discovered via the languageID parameter in the "/web inc.php" API endpoint. This allows for potential exploitation. Recommendations: For SEMCMS version 4.8, consider restricting access...