655 matches found
CVE-2018-18739
CVE-2018-18739 affects SEMCMS 3.4, with a cross-site scripting vulnerability in the admin/SEMCMS_Products.php?lgid=1 Keywords field. The issue is documented across multiple sources (NVD, CNVD, CVE lists). The connected documents confirm the vulnerable component is the Keywords input in SEMCMS 3.4...
CVE-2018-18742
CVE-2018-18742 concerns SEMCMS 3.4, where a cross-site request forgery (CSRF) vulnerability exists in the admin flow accessed via the URI admin/SEMCMS_User.php?Class=add&CF=user. The issue, described as CSRF, could enable unauthorized operations on behalf of an authenticated user. CVSS metrics fr...
CVE-2018-18740
An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...
CVE-2018-18744
An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMSMain.php URI...
CVE-2018-18738
An XSS vulnerability (CVE-2018-18738) affects SEMCMS 3.4, exploitable via the admin/SEMCMS_Categories.php?pid=1&lgid=1&category_key parameter. The vulnerability is due to unsafely handled input in the category_key field, enabling injection of arbitrary web script/HTML. Reported impact metrics ind...
CVE-2018-18741
CVE-2018-18741 describes a Cross-Site Scripting (XSS) vulnerability in SEMCMS 3.4, exploitable via the URI admin/SEMCMS_Download.php?lgid=1 during editing. The issue is documented across multiple sources (NVD, CNVD, CVE lists) with the impact characteristics: confidentiality impact LOW, integrity...
CVE-2018-18744
CVE-2018-18744 describes a cross-site scripting (XSS) vulnerability in SEMCMS 3.4 . The issue is exploitable via the fifth text box in the path to the URI admin/SEMCMS_Main.php , enabling an attacker to inject arbitrary script/HTML. The provided data cites an XSS impact with low to medium severit...
CVE-2018-18743
An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMSCategories.php?pid=1&lgid=1 URI...
CVE-2018-18745
An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...
CVE-2018-18739
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
CVE-2018-18742
A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...
CVE-2018-18743
CVE-2018-18743 affects SEMCMS 3.4 and is a Cross-Site Scripting (XSS) vulnerability exploitable via the second text field in the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. NVD metrics show CVSS v2 base score 3.5 (LOW) with NETWORK attack vector, MEDIUM complexity, and partial integrity impact;...
CVE-2018-18739: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...
CVE-2018-18742: Cross-Site Request Forgery (CSRF)
A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...
CVE-2018-18745: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...
CVE-2018-18738: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSCategories.php?pid=1&lgid=1 categorykey parameter...
CVE-2018-18744: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMSMain.php URI...
CVE-2018-18740: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...
CVE-2018-18741: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...
CVE-2018-18743: Improper Neutralization of Input During Web Page Generation
An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMSCategories.php?pid=1&lgid=1 URI...