SEMCMS 安全漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites with multi-language support. A security vulnerability exists in SEMCMS v4.8, which stems from the inclusion of a SQL injection vulnerability that allows an attacker to execute arbitrary code via the ldgid...

SEMCMS SQL Injection Vulnerability (CNVD-2024-39254)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 4.8, which originates from the lack of validation of external SQL statements in SEMCMSMain.php. An attacker can exploit this vulnerability to execut...

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

CVE-2024-46103

The SEMCMS web content management system, specifically version 4.8 , is vulnerable to SQL Injection via the SEMCMS_Main.php file. The root cause is a lack of validation for external SQL statements, which allows an attacker to execute illegal SQL commands to steal sensitive database data. As a tem...

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

CVE-2024-46103: Improper Control of Generation of Code

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

The vulnerability of the SEMCMS_Download.php script of the website management system for foreign trade enterprises SemCms allows a hacker to execute arbitrary SQL queries and gain unauthorized access to protected information.

The vulnerability of the SEMCMSDownload.php script of the website management system for SemCms foreign trade enterprises is related to the lack of measures to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries and gain unauthorized...

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36801

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36801

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

CVE-2024-36800: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

PT-2024-27163 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the ID parameter in "Download.php". Recommendations: For SEMCMS version 4.8, update to a version that fixes this issue, as usin...

CVE-2024-36801: Improper Neutralization of Special Elements used in an SQL Command

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

PT-2024-4051 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: A SQL injection issue allows a remote attacker to obtain sensitive information via the lgid parameter in "Download.php". The vulnerability is related to the lack of protection for the SQL query structure, which...

SEMCMS SQL Injection Vulnerability (CNVD-2024-23136)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS 4.8 and earlier versions suffer from a SQL injection vulnerability, which stems from the application's lack of validation of external input SQL statements, and can be exploited by attackers to...