CVE-2022-2726: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The...

SEMCMS SQL Injection Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS suffers from an Access Control Error vulnerability, which stems from a vulnerability found in the checkuser function, which can be exploited by an attacker to obtain passwords in plaintext via a S...

SEMCMS Access Control Error Vulnerability

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS is vulnerable to an access control error that originates from a vulnerability in /include/webcheck.php, which can be exploited to reset the password of the administrator account...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18078

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

Design/Logic Flaw

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

Design/Logic Flaw

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

CVE-2020-18081

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18081

The CVE-2020-18081 entry concerns SEMCMS 3.8, where the checkuser function is vulnerable to an access-control/SQL query flaw that can disclose plaintext passwords. The vulnerability allows an attacker to obtain passwords via a crafted SQL query, with network access and no authentication required ...

CVE-2020-18078

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

CVE-2020-18078

CVE-2020-18078 affects SEMCMS v3.8 via a vulnerability in /include/web_check.php that allows resetting the Administrator password. Implementations in multiple feeds confirm the root cause as an access/verification issue within that script, leading to an account takeover risk for the admin account...

PT-2021-10126

Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.8 Description: A vulnerability in the "/include/web check.php" file allows attackers to reset the Administrator account's password. Recommendations: For SEMCMS version 3.8, consider disabling access to the "/include/web...

PT-2021-10127

Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.8 Description: A vulnerability was discovered in the checkuser function, allowing attackers to obtain passwords in plaintext through a SQL query. Recommendations: For SEMCMS version 3.8, consider disabling the checkuser...

CVE-2020-18081: Improper Neutralization of Special Elements used in an SQL Command

The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query...

CVE-2020-18078: Undefined Security Weakness

A vulnerability in /include/webcheck.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS suffers from an Access Control Error vulnerability, which stems from a vulnerability found in the checkuser function, which can be exploited by an attacker to obtain passwords in plaintext via a S...

File Upload Vulnerability in SEMCMS Shop

SEMCMS Shop is a self-developed open source online store btc system. A file upload vulnerability exists in SEMCMS Shop. An attacker can exploit the vulnerability to upload a webshell and gain server privileges...

SQL Injection Vulnerability in SEMCMS Shop

SEMCMS Shop is a self-developed open source online store btc system. SEMCMS Shop suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...

SEMCMS Shop suffers from SQL injection vulnerability (CNVD-2021-43573)

SEMCMS Shop is a self-developed open source online store btc system. SEMCMS Shop suffers from a SQL injection vulnerability. An attacker can exploit the vulnerability to obtain sensitive information from the database...