Lucene search
+L

690 matches found

Cvelist
Cvelist
•added 2024/11/20 12:00 a.m.•39 views

CVE-2024-52725

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

0.0055EPSS
SaveExploits1References1
CVE
CVE
•added 2024/11/20 12:00 a.m.•87 views

CVE-2024-52725

SemCms v4.8 is susceptible to a SQL injection vulnerability within the SEMCMS_SeoAndTag.php component. An attacker can exploit the ldgid parameter to execute arbitrary code. As a temporary workaround, it is recommended to restrict access to the affected component and avoid using the ldgid paramet...

4.9CVSS8.8AI score0.0055EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/11/20 12:00 a.m.•14 views

CVE-2024-52725

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

6.1AI score0.0055EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/20 12:00 a.m.•14 views

PT-2024-35420 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 4.8 Description: The issue allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS SeoAndTag.php component. This is a SQL injection vulnerability. Recommendations: For SemCms version 4.8, consider...

4.9CVSS8.7AI score0.0055EPSS
SaveExploits1References6
Mend
Mend
•added 2024/11/20 12:00 a.m.•1 views

CVE-2024-52725

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

6.9CVSS0.0055EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/20 12:00 a.m.•4 views

CVE-2024-52725: Improper Neutralization of Special Elements used in an SQL Command

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...

4.9CVSS6.5AI score0.0055EPSS
SaveExploits1References3
CNVD
CNVD
•added 2024/09/24 12:00 a.m.•29 views

SEMCMS SQL Injection Vulnerability (CNVD-2024-39254)

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. A SQL injection vulnerability exists in SEMCMS version 4.8, which originates from the lack of validation of external SQL statements in SEMCMSMain.php. An attacker can exploit this vulnerability to execut...

9.8CVSS7.9AI score0.0051EPSS
SaveExploits1References1
OSV
OSV
•added 2024/09/20 9:15 p.m.•14 views

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/20 9:15 p.m.•27 views

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

9.8CVSS0.0051EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/20 12:00 a.m.•44 views

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

0.0051EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/20 12:00 a.m.•74 views

CVE-2024-46103

The SEMCMS web content management system, specifically version 4.8 , is vulnerable to SQL Injection via the SEMCMS_Main.php file. The root cause is a lack of validation for external SQL statements, which allows an attacker to execute illegal SQL commands to steal sensitive database data. As a tem...

9.8CVSS8.4AI score0.0051EPSS
SaveExploits1References1Affected Software1
Vulnrichment
Vulnrichment
•added 2024/09/20 12:00 a.m.•13 views

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

8.1AI score0.0051EPSS
SaveExploits1References1
Mend
Mend
•added 2024/09/20 12:00 a.m.•2 views

CVE-2024-46103

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

9.8CVSS0.0051EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/20 12:00 a.m.•5 views

CVE-2024-46103: Improper Control of Generation of Code

SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMSMain.php...

9.8CVSS5.8AI score0.0051EPSS
SaveExploits1References1
BDU FSTEC
BDU FSTEC
•added 2024/06/13 12:00 a.m.•15 views

The vulnerability of the SEMCMS_Download.php script of the website management system for foreign trade enterprises SemCms allows a hacker to execute arbitrary SQL queries and gain unauthorized access to protected information.

The vulnerability of the SEMCMSDownload.php script of the website management system for SemCms foreign trade enterprises is related to the lack of measures to protect the SQL query structure. Exploiting this vulnerability allows an attacker to execute arbitrary SQL queries and gain unauthorized...

6.5CVSS6AI score0.00391EPSS
SaveExploits1References3Affected Software1
OSV
OSV
•added 2024/06/04 1:15 p.m.•15 views

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

7.5CVSS5.9AI score0.007EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/04 1:15 p.m.•29 views

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

7.5CVSS7AI score0.007EPSS
SaveExploits1References1
NVD
NVD
•added 2024/06/04 1:15 p.m.•23 views

CVE-2024-36801

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php...

5.9CVSS7AI score0.00391EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/06/04 12:49 p.m.•18 views

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

7.3AI score0.007EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/06/04 12:49 p.m.•37 views

CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

7AI score0.007EPSS
SaveExploits1References1
Rows per page
Query Builder