655 matches found
PT-2023-11503 · Unknown · Semcms Php
Name of the Vulnerable Software and Affected Versions: SEMCMS PHP version 3.7 Description: The issue allows remote attackers to upload arbitrary files and gain escalated privileges. Recommendations: For SEMCMS PHP version 3.7, update to a version that fixes the file upload issue to prevent remote...
CVE-2020-18432
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges...
SEMCMS SQL Injection Vulnerability (CNVD-2023-41864)
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 1.5, which originates from the lack of validation of external input SQL statements in AntRponse.php. An attacker can exploit this vulnerability to...
CVE-2023-31707
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
Sql injection
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
CVE-2023-31707
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
CVE-2023-31707
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
PT-2023-23426 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.5 Description: The issue is related to SQL Injection via the Ant Rponse.php file. Recommendations: For SEMCMS version 1.5, update to a version that fixes the SQL Injection issue in Ant Rponse.php, however, at the moment, ther...
CVE-2023-31707: Improper Neutralization of Special Elements used in an SQL Command
SEMCMS 1.5 is vulnerable to SQL Injection via AntRponse.php...
CVE-2023-31707
SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. Root cause: input validation in Ant_Rponse.php missing, enabling arbitrary SQL execution. Impact: high confidentiality, integrity, and availability; CVSS 3.1 base score 9.8 (CRITICAL) with network access, no authentication, and no user...
CVE-2023-30090
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-30090
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-30090
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-30090: Unrestricted Upload of File with Dangerous Type
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
CVE-2023-30090
Semcms Shop v4.2 is affected by an arbitrary file upload vulnerability in the SEMCMS_Upfile.php component, enabling an attacker to upload a crafted PHP file and achieve arbitrary code execution. Affected product: Semcms Shop 4.2; vulnerable component: SEMCMS_Upfile.php; root cause: improper file ...
CVE-2023-30090
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMSUpfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file...
PT-2023-7519 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: Semcms Shop version 4.2 Description: The issue is related to an arbitrary file upload vulnerability via the SEMCMS Upfile.php component. This allows attackers to execute arbitrary code by uploading a crafted PHP file. The vulnerability can be...
SEMCMS Ant_Zekou.php SQL Injection Vulnerability
SEMCMS is a multilingual foreign trade web content management system CMS.A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntZekou.php. An attacker can use this vulnerability to execute illegal SQ...
SEMCMS Ant_Pro.php SQL Injection Vulnerability
SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which originates from the lack of validation of externally entered SQL statements in AntPro.php. An attacker can use this vulnerability to...