Cross site scripting

XSS was discovered in SEMCMS V3.4 via the semcmsremail.php?type=ok umail parameter...

Cross site request forgery (csrf)

A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSCategories.php?pid=1&lgid=1 categorykey parameter...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMSCategories.php?pid=1&lgid=1 URI...

Cross site scripting

An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...

CVE-2018-18783

XSS was discovered in SEMCMS V3.4 via the semcmsremail.php?type=ok umail parameter...

CVE-2018-18783

CVE-2018-18783 affects SEMCMS V3.4. A reflected/DOM-like cross-site scripting vulnerability is exploitable through the semcms_remail.php?type=ok umail parameter, enabling injection of arbitrary scripts via this input. The vulnerability is documented with CVSS base scores (2.0/4.3 and 3.0/6.1) ind...

SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01720)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by a remote attacker to inject arbitrary Web script or HTML with the help of...

SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01726)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML by sending the 'umail' parameter to the...

SEMCMS Cross-Site Scripting Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of admin/SEMCMSMenu.php?lgid=1 URL...

SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01723)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by a remote attacker to inject arbitrary web script or HTML with the help of the first input field of...

SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01725)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS3.4 version of a cross-site scripting vulnerability, remote attackers can admin/SEMCMSCategories.php?pid=1&lgid=1 URI's 'categorykey ' parameter to take advantage of the vulnerability to inject...

SEMCMS Cross-Site Scripting Vulnerability (CNVD-2019-01722)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A cross-site scripting vulnerability exists in SEMCMS version 3.4, which can be exploited by remote attackers to inject arbitrary Web script or HTML with the help of admin/SEMCMSDownload.php?lgid=1 URI...

CVE-2018-18738

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSCategories.php?pid=1&lgid=1 categorykey parameter...

CVE-2018-18745

CVE-2018-18745 is an XSS vulnerability in SEMCMS 3.4 exploitable via the admin/SEMCMS_Menu.php?lgid=1 page during editing. Connected sources consistently confirm a cross-site scripting issue affecting SEMCMS 3.4; no vendor/version patch details are provided in the documents. The NVD entry lists b...

CVE-2018-18740

CVE-2018-18740 describes a cross-site scripting (XSS) vulnerability in SEMCMS 3.4. The issue occurs in the first input field when accessing the URI admin/SEMCMS_Link.php?lgid=1, allowing injection of arbitrary script/HTML. Connected sources (NVD/NVDC/CVE records and CNVD/PRION entries) consistent...

CVE-2018-18742

CVE-2018-18742 concerns SEMCMS 3.4, where a cross-site request forgery (CSRF) vulnerability exists in the admin flow accessed via the URI admin/SEMCMS_User.php?Class=add&CF=user. The issue, described as CSRF, could enable unauthorized operations on behalf of an authenticated user. CVSS metrics fr...