CVE-2021-38737

The CVE-2021-38737 entry concerns SEMCMS v1.1 with a SQL Injection flaw in Ant_Pro.php. The connected sources confirm the vulnerability is due to lack of validation of externally supplied SQL statements, enabling an attacker to execute arbitrary SQL and potentially exfiltrate data. No concrete re...

CVE-2021-38730

SemCMS SHOP v1.1 is affected by a SQL Injection vulnerability in Ant_Info.php (CVE-2021-38730). The issue allows unauthenticated attackers to inject SQL, with high impact to confidentiality, integrity, and availability (CVSS 3.1: CRITICAL, AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). Several connected s...

CVE-2021-38729

CVE-2021-38729 affects SEMCMS SHOP version 1.1. The vulnerability is a SQL Injection in Ant_Plist.php, with CVSS v3.1 base score 9.8 (CRITICAL). Public references indicate a PoC exists and potential exploitation; details in the Adp entry note a total technical impact. Pending remediation: PT-2022...

CVE-2021-38728

CVE-2021-38728 affects SEMCMS SHOP v1.1, with a stored/reflected Cross-Site Scripting (XSS) vulnerability in Ant_M_Coup.php. The available sources indicate the issue resides in a web-exposed component, enabling an attacker to inject scripts that may be executed in a user’s browser, given network ...

CVE-2021-38733

CVE-2021-38733 affects SEMCMS SHOP v1.1 with a SQL injection in Ant_BlogCat.php. All sources indicate a high-severity vulnerability (CVSS 3.1: 9.8) potentially allowing unauthorized database access without authentication. The connected documents do not provide exploit details or confirmed in-the-...

CVE-2021-38217

SEMCMS 1.2 is affected by a SQL Injection vulnerability in SEMCMS_User.php. The issue, documented across multiple sources (CVE-2021-38217), is classified with CVSSv3.1 base score 9.8 (CRITICAL) and is exploitable remotely without privileges or user interaction. The vulnerability stems from input ...

CVE-2021-38731

CVE-2021-38731 concerns SEMCMS SHOP v1.1, where Ant_Zekou.php is vulnerable to SQL injection due to input validation gaps. The weakness can allow an attacker to execute arbitrary SQL commands and potentially exfiltrate or manipulate database data. Documented impacts are high (health of data confi...

CVE-2021-38732

CVE-2021-38732 affects SEMCMS SHOP v1.1, with a SQL injection in Ant_Message.php. The vulnerability is rated CVSS v3.1 9.8 (CRITICAL): Network attack vector, no authentication, low complexity, no user interaction required, and impacts confidentiality, integrity, and availability. Documentation co...

PT-2022-10766

Name of the Vulnerable Software and Affected Versions SEMCMS Shop version 1.1 Description The issue is related to SQL Injection via the Ant Global.php file. This allows for potential exploitation. Recommendations For SEMCMS Shop version 1.1, consider restricting access to the Ant Global.php file...

CVE-2021-38736: Improper Neutralization of Special Elements used in an SQL Command

SEMCMS Shop V 1.1 is vulnerable to SQL Injection via AntGlobal.php...

CVE-2021-38728

SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...

PT-2022-10758

Name of the Vulnerable Software and Affected Versions SEMCMS SHOP version 1.1 Description The issue is related to Cross Site Scripting XSS via the Ant M Coup.php file. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions. Recommendations For...

PT-2022-10767

Name of the Vulnerable Software and Affected Versions SEMCMS version 1.1 Description The issue is related to SQL Injection via the Ant Pro.php file. Recommendations For SEMCMS version 1.1, consider restricting access to the Ant Pro.php file as a temporary workaround until a patch is available...

PT-2022-10762 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Zekou.php file. Recommendations: For SEMCMS SHOP version 1.1, update to a version that fixes the SQL Injection issue in Ant Zekou.php, if available. As a...

PT-2022-10763 · Unknown · Semcms Shop

Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue affects the Ant Message.php file, allowing for SQL injection. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Message.php file until a patch is available. As ...

CVE-2022-2726

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

Sql injection

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2022-2726 SEMCMS Ant_Check.php sql injection

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

CVE-2022-2726

CVE-2022-2726 concerns SEMCMS. A SQL injection vulnerability exists in an unknown part of Ant_Check.php triggered by manipulating the DID parameter, with remote exploitation claimed. Multiple connected sources corroborate a critical severity and public exploit disclosure, affecting SEMCMS via Ant...

PT-2022-18336 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS affected versions not specified Description: A critical vulnerability has been found in SEMCMS, affecting an unknown part of the file Ant Check.php. The manipulation of the DID argument leads to sql injection. It is possible to initiat...