698 matches found
CVE-2023-30090: Unrestricted Upload of File with Dangerous Type
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2023-7519 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: Semcms Shop version 4.2 Description: The issue is related to an arbitrary file upload vulnerability via the SEMCMS Upfile.php component. This allows attackers to execute arbitrary code by uploading a crafted PHP file. The vulnerability can be...
SEMCMS Ant_Zekou.php SQL Injection Vulnerability
SEMCMS is a multilingual foreign trade web content management system CMS.A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntZekou.php. An attacker can use this vulnerability to execute illegal SQ...
SEMCMS Ant_Pro.php SQL Injection Vulnerability
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntPro.php. An attacker can use this vulnerability to...
CVE-2021-38731
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...
CVE-2021-38732
SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...
CVE-2021-38730
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...
CVE-2021-38731
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...
CVE-2021-38733
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...
CVE-2021-38732
SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2021-38728
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...
CVE-2021-38729
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntPlist.php...
Sql injection
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...
Design/Logic Flaw
SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...
Cross site scripting
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...
Sql injection
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...
Sql injection
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...