CVE-2018-18740

An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...

CVE-2018-18745

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...

CVE-2018-18742

A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...

CVE-2018-18744

An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMSMain.php URI...

CVE-2018-18741

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...

PT-2018-14617

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the Keywords field of the admin/SEMCMS Products.php page, specifically when the lgid parameter is set to 1. Recommendations For SEMCMS version 3.4, update the SEMCMS...

PT-2018-14620

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A CSRF issue was discovered in the software via the "admin/SEMCMS User.php?Class=add&CF=user" API endpoint. Recommendations For SEMCMS version 3.4, update to a version that includes a fix for this issue, if...

PT-2018-14616

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found, allowing potential exploitation through the category key parameter in the "admin/SEMCMS Categories.php" endpoint, specifically when the parameters pid=1 and lgid=1 are...

PT-2018-14618

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "admin/SEMCMS Link.php?lgid=1" API endpoint. Recommendations For SEMCMS version 3.4, as a temporary workaround, consider...

PT-2018-14621

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the admin/SEMCMS Categories.php URI, specifically via the second text field. Recommendations For SEMCMS version 3.4, update to a version that fixes this issue, as no...

PT-2018-14623

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software, specifically during editing operations. The issue is related to the admin/SEMCMS Menu.php endpoint, where the lgid parameter is used. For example, the...

CVE-2018-18744: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMSMain.php URI...

CVE-2018-18745: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...

CVE-2018-18743: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMSCategories.php?pid=1&lgid=1 URI...

CVE-2018-18741: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...

CVE-2018-18739: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...

CVE-2018-18740: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...

CVE-2018-18742: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...

PT-2018-14619

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "admin/SEMCMS Download.php" endpoint, specifically when the lgid parameter is set to "1" during editing. Recommendations For...

PT-2018-14622

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the admin/SEMCMS Main.php URI, specifically via the fifth text box. Recommendations For SEMCMS version 3.4, update to a version that includes a fix for this issue, as...