659 matches found
CVE-2021-38733
CVE-2021-38733 affects SEMCMS SHOP v1.1 with a SQL injection in Ant_BlogCat.php. All sources indicate a high-severity vulnerability (CVSS 3.1: 9.8) potentially allowing unauthorized database access without authentication. The connected documents do not provide exploit details or confirmed in-the-...
PT-2022-10759 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Plist.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Plist.php file as a temporary workaround until a patch...
CVE-2021-38737
The CVE-2021-38737 entry concerns SEMCMS v1.1 with a SQL Injection flaw in Ant_Pro.php. The connected sources confirm the vulnerability is due to lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL and potentially exfiltrate data. No concrete re...
SEMCMS SQL注入漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.2, which stems from a SQL injection issue in SEMCMSUser.php...
SEMCMS SQL注入漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntMenu.php...
PT-2022-10765 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Menu.php file. This allows for potential exploitation. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Menu.php file a...
CVE-2021-38733: Improper Neutralization of Special Elements used in an SQL Command
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...
CVE-2021-38736: Improper Neutralization of Special Elements used in an SQL Command
SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...
CVE-2021-38729
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntPlist.php...
PT-2022-10764 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant BlogCat.php file. This allows for potential exploitation of the database. No information is provided about the estimated number of potentially affected...
CVE-2021-38736
SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...
CVE-2021-38733
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...
PT-2022-10699 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.2 Description: The issue is related to SQL Injection via the SEMCMS User.php file. Recommendations: For SEMCMS version 1.2, update to a version that fixes the SQL Injection issue in SEMCMS User.php...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2021-38732
SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...
CVE-2021-38732
CVE-2021-38732 affects SEMCMS SHOP v1.1, with a SQL injection in Ant_Message.php. The vulnerability is rated CVSS v3.1 9.8 (CRITICAL): Network attack vector, no authentication, low complexity, no user interaction required, and impacts confidentiality, integrity, and availability. Documentation co...
CVE-2021-38734
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...
PT-2022-10763 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue affects the Ant Message.php file, allowing for SQL injection. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Message.php file until a patch is available. As ...