SQL Injection Vulnerability in SemCms

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. SemCms SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

Sql injection

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2019-11518

CVE-2019-11518 affects SEMCMS 3.8 with a SQL injection in SEMCMS_Inquiry.php due to incomplete protection in class.phpmailer.php inject_check_sql. The root cause is an incomplete safeguard allowing AID[] manipulation to inject SQL. CVSS metrics (NVD) list a v3 base score 7.2 (HIGH), network attac...

CVE-2019-11518

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

CVE-2019-11518: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...

PT-2019-12350

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.8 Description An issue was discovered in SEMCMS, where the SEMCMS Inquiry.php file allows SQL Injection through the AID parameter because the inject check sql protection mechanism in the class.phpmailer.php file is incomplete...

SQL Injection Vulnerability in semcms Backend

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...

Semcms asp version V4.6 suffers from SQL Injection Vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. Semcms asp version V4.6 version exists SQL injection vulnerability . Attackers can use the vulnerability to obtain...

SemCms foreign trade website management system (PHP version) front co***.php page has xss vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version front co.php page there are xss...

SQL Injection Vulnerability in SemCms Foreign Trade Website Management System (PHP Version) SE***.php Page

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version SE.php page there is a SQL injection...

CVE-2018-20017

SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...

Design/Logic Flaw

SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...

CVE-2018-20017

SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...

CVE-2018-20017

CVE-2018-20017 affects SEMCMS 3.5. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the first text box on the SEMCMS_Main.php URI. This is confirmed in multiple sources (NVD description and CNVD-2019-05836), which state attackers can use the vulnerability through that input ...

CVE-2018-20017

SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...

CVE-2018-20017: Improper Neutralization of Input During Web Page Generation

SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...

PT-2018-15238

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.5 Description The issue allows for XSS via the first text box to the "SEMCMS Main.php" URI. Recommendations For SEMCMS version 3.5, update to a version that fixes this issue, or as a temporary workaround, consider restricting...

SEMCMS PHP Cross-Site Scripting Vulnerability

SEMCMS is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers. SEMCMS PHP version 3.4 cross-site scripting vulnerability , attackers can use the vulnerability...