690 matches found
PT-2019-12350
Name of the Vulnerable Software and Affected Versions SEMCMS version 3.8 Description An issue was discovered in SEMCMS, where the SEMCMS Inquiry.php file allows SQL Injection through the AID parameter because the inject check sql protection mechanism in the class.phpmailer.php file is incomplete...
CVE-2019-11518: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...
SQL Injection Vulnerability in semcms Backend
SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises. semcms background SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive database information...
Semcms asp version V4.6 suffers from SQL Injection Vulnerability
SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. Semcms asp version V4.6 version exists SQL injection vulnerability . Attackers can use the vulnerability to obtain...
SemCms foreign trade website management system (PHP version) front co***.php page has xss vulnerability
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version front co.php page there are xss...
SQL Injection Vulnerability in SemCms Foreign Trade Website Management System (PHP Version) SE***.php Page
SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system PHP version SE.php page there is a SQL injection...
CVE-2018-20017
SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...
Design/Logic Flaw
SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...
CVE-2018-20017
SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...
CVE-2018-20017
SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...
CVE-2018-20017
CVE-2018-20017 affects SEMCMS 3.5. The vulnerability is a cross-site scripting (XSS) flaw exploitable via the first text box on the SEMCMS_Main.php URI. This is confirmed in multiple sources (NVD description and CNVD-2019-05836), which state attackers can use the vulnerability through that input ...
CVE-2018-20017: Improper Neutralization of Input During Web Page Generation
SEMCMS 3.5 has XSS via the first text box to the SEMCMSMain.php URI...
PT-2018-15238
Name of the Vulnerable Software and Affected Versions SEMCMS version 3.5 Description The issue allows for XSS via the first text box to the "SEMCMS Main.php" URI. Recommendations For SEMCMS version 3.5, update to a version that fixes this issue, or as a temporary workaround, consider restricting...
SEMCMS PHP cross-site scripting vulnerability (CNVD-2019-09619)
SEMCMS is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers. SEMCMS PHP version 3.4 cross-site scripting vulnerability , attackers can use the vulnerability...
SEMCMS PHP Cross-Site Scripting Vulnerability
SEMCMS is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers. SEMCMS PHP version 3.4 cross-site scripting vulnerability , attackers can use the vulnerability...
CVE-2018-18841
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMSSeoAndTag.php?Class=edit&CF=SeoAndTag tagindexkey parameter...
CVE-2018-18840
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMSSeoAndTag.php?Class=edit&CF=SeoAndTag tagindexmetatit parameter...
CVE-2018-18841
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMSSeoAndTag.php?Class=edit&CF=SeoAndTag tagindexkey parameter...