5 matches found
CVE-2026-39170
SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...
CVE-2026-39169
The SEMCMS 5.0 content management system is vulnerable to an unauthorized access flaw within the SEMCMS_copy.php file. This access control vulnerability stems from improper permission checks, potentially allowing an attacker to access restricted functions. Exploitation details and specific remedi...
CVE-2026-39170
SemCms version 5.0 is vulnerable to a Cross-Site Request Forgery (CSRF) . The root cause is the improper handling of POST requests directed to the /admin/semcms_user.php endpoint. An attacker could potentially execute unauthorized actions by tricking an authenticated user into making a crafted re...
