CVE-2021-38734

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...

CVE-2021-38737

SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...

PT-2022-10761 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection, which can be exploited via the Ant Info.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Info.php file as a temporary...

PT-2022-10764 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant BlogCat.php file. This allows for potential exploitation of the database. No information is provided about the estimated number of potentially affected...

PT-2022-10765 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Menu.php file. This allows for potential exploitation. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Menu.php file a...

PT-2022-10762 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Zekou.php file. Recommendations: For SEMCMS SHOP version 1.1, update to a version that fixes the SQL Injection issue in Ant Zekou.php, if available. As a...

PT-2022-10759 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Plist.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Plist.php file as a temporary workaround until a patch...

PT-2022-10763 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue affects the Ant Message.php file, allowing for SQL injection. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Message.php file until a patch is available. As ...

CVE-2021-38731: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntZekou.php...

CVE-2021-38734: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...

CVE-2021-38733: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...

CVE-2021-38728: Improper Neutralization of Input During Web Page Generation

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

CVE-2021-38217: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...

CVE-2021-38732: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...

CVE-2021-38730: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...

CVE-2021-38729: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntPlist.php...

CVE-2021-38736

The CVE-2021-38736 entry concerns SEMCMS Shop v1.1 with a SQL injection vulnerability in Ant_Global.php. The issue is documented as a high-severity (CVSS v3.1: 9.8, CRITICAL) vulnerability affecting confidentiality, integrity, and availability (C/H/I/A). Connected sources confirm the affected com...

CVE-2021-38734

Summary (mode C): SEMCMS SHOP version 1.1 is affected by a SQL Injection in Ant_Menu.php. The vulnerability is documented with a high-impact CVSS (CRITICAL, BOOTSTRAP: NETWORK, no privileges needed, no user interaction) affecting confidentiality, integrity, and availability. The root cause is an ...

CVE-2021-38737

The CVE-2021-38737 entry concerns SEMCMS v1.1 with a SQL Injection flaw in Ant_Pro.php. The connected sources confirm the vulnerability is due to lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL and potentially exfiltrate data. No concrete re...

CVE-2021-38730

SemCMS SHOP v1.1 is affected by a SQL Injection vulnerability in Ant_Info.php (CVE-2021-38730). The issue allows unauthenticated attackers to inject SQL, with high impact to confidentiality, integrity, and availability (CVSS 3.1: CRITICAL, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Several connected s...