CVE-2020-18432

File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges...

CVE-2025-25686

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

CVE-2025-25686

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

CVE-2025-25686

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

CVE-2025-25686

The SEMCMS open source content management system, specifically versions

CVE-2025-25686

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

CVE-2025-25686

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

PT-2025-13273

Name of the Vulnerable Software and Affected Versions SEMCMS versions prior to 5.1 Description The issue allows remote attackers to execute arbitrary SQL commands due to a SQL injection flaw in the SEMCMS Fuction.php file. It is recommended to take immediate action. Recommendations For versions...

CVE-2025-25686: Improper Neutralization of Special Elements used in an SQL Command

semcms =5.0 is vulnerable to SQL Injection in SEMCMSFuction.php...

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36801

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

CVE-2024-13193

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13193

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13193 SEMCMS Image Library Management Page SEMCMS_Images.php sql injection

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13193

CVE-2024-13193 affects SEMCMS up to v4.8, with a SQL injection in the SEMCMS_Images.php of the Image Library Management Page. The vulnerability is exploitable remotely and the exploit has been disclosed publicly; vendor response has been non-existent in the provided material. Connected sources co...

CVE-2024-13193 SEMCMS Image Library Management Page SEMCMS_Images.php sql injection

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-13193: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMSImages.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The...

CVE-2024-52725

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

CVE-2024-52725

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

SEMCMS 安全漏洞

SEMCMS is SEMCMS open source content management system CMS for foreign trade websites with multi-language support. A security vulnerability exists in SEMCMS v4.8, which stems from the inclusion of a SQL injection vulnerability that allows an attacker to execute arbitrary code via the ldgid...