CVE-2021-38730

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...

CVE-2021-38733: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...

CVE-2021-38731: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...

CVE-2021-38217: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...

CVE-2021-38734

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...

PT-2022-10761 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection, which can be exploited via the Ant Info.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Info.php file as a temporary...

CVE-2021-38736

The CVE-2021-38736 entry concerns SEMCMS Shop v1.1 with a SQL injection vulnerability in Ant_Global.php. The issue is documented as a high-severity (CVSS v3.1: 9.8, CRITICAL) vulnerability affecting confidentiality, integrity, and availability (C/H/I/A). Connected sources confirm the affected com...

SEMCMS 跨站脚本漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A cross-site scripting vulnerability exists in SEMCMS SHOP version 1.1, which stems from a cross-site scripting issue in AntMCoup.php...

SEMCMS SQL注入漏洞

SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntPlist.php...

CVE-2021-38736: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...

CVE-2021-38728

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

CVE-2021-38733

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...

PT-2022-10766

Name of the Vulnerable Software and Affected Versions SEMCMS Shop version 1.1 Description The issue is related to SQL Injection via the Ant Global.php file. This allows for potential exploitation. Recommendations For SEMCMS Shop version 1.1, consider restricting access to the Ant Global.php file...

PT-2022-10767

Name of the Vulnerable Software and Affected Versions SEMCMS version 1.1 Description The issue is related to SQL Injection via the Ant Pro.php file. Recommendations For SEMCMS version 1.1, consider restricting access to the Ant Pro.php file as a temporary workaround until a patch is available...

CVE-2021-38732: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...

CVE-2021-38728: Improper Neutralization of Input During Web Page Generation

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

CVE-2021-38733

CVE-2021-38733 affects SEMCMS SHOP v1.1 with a SQL injection in Ant_BlogCat.php. All sources indicate a high-severity vulnerability (CVSS 3.1: 9.8) potentially allowing unauthorized database access without authentication. The connected documents do not provide exploit details or confirmed in-the-...

PT-2022-10763 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue affects the Ant Message.php file, allowing for SQL injection. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Message.php file until a patch is available. As ...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntPro.php. An attacker can use this vulnerability to...

PT-2022-10758

Name of the Vulnerable Software and Affected Versions SEMCMS SHOP version 1.1 Description The issue is related to Cross Site Scripting XSS via the Ant M Coup.php file. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions. Recommendations For...