CVE-2024-30938: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31012

An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

SEMCMS 安全漏洞

SEMCMS is a foreign trade website content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originates from a SQL injection vulnerability in the ID parameter in Banner.php...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31010: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31012: Unrestricted Upload of File with Dangerous Type

An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file...

CVE-2024-31009: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31012

A security vulnerability exists in SEMCMS v.4.8 , a content management system for foreign trade websites. The flaw resides in the upload.php file, which allows remote attackers to execute arbitrary code , escalate privileges , and obtain sensitive information . To mitigate this risk, it is recomm...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31012

An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

CVE-2024-31009

A SQL injection vulnerability exists in SEMCMS v.4.8 , specifically within the lgid parameter of the Banner.php file. This flaw allows a remote attacker to obtain sensitive information from the system. As a temporary workaround, it is recommended to restrict access to the Banner.php file or the l...

CVE-2024-31010

SEMCMS v.4.8 is susceptible to a SQL injection vulnerability within the Banner.php file. A remote attacker can exploit this flaw by targeting the ID parameter to obtain sensitive information. As of the current documentation, there is no information regarding a newer version that contains a fix. T...

PT-2024-23725 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: An issue in SEMCMS allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file. Recommendations: For SEMCMS version 4.8, consider disabling...

CVE-2024-28405

SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMSFuntion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges...

CVE-2024-28405: Improper Access Control

SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMSFuntion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges...