CVE-2018-18743: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMSCategories.php?pid=1&lgid=1 URI...

CVE-2018-18745: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSMenu.php?lgid=1 during editing...

CVE-2018-18738: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSCategories.php?pid=1&lgid=1 categorykey parameter...

CVE-2018-18739: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMSProducts.php?lgid=1 Keywords field...

CVE-2018-18744: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMSMain.php URI...

CVE-2018-18740: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMSLink.php?lgid=1 URI...

CVE-2018-18741: Improper Neutralization of Input During Web Page Generation

An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMSDownload.php?lgid=1 during editing...

CVE-2018-18742: Cross-Site Request Forgery (CSRF)

A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMSUser.php?Class=add&CF=user URI...

PT-2018-14619

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software. The issue is related to the "admin/SEMCMS Download.php" endpoint, specifically when the lgid parameter is set to "1" during editing. Recommendations For...

PT-2018-14617

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the Keywords field of the admin/SEMCMS Products.php page, specifically when the lgid parameter is set to 1. Recommendations For SEMCMS version 3.4, update the SEMCMS...

PT-2018-14621

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the admin/SEMCMS Categories.php URI, specifically via the second text field. Recommendations For SEMCMS version 3.4, update to a version that fixes this issue, as no...

PT-2018-14620

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A CSRF issue was discovered in the software via the "admin/SEMCMS User.php?Class=add&CF=user" API endpoint. Recommendations For SEMCMS version 3.4, update to a version that includes a fix for this issue, if...

PT-2018-14623

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the software, specifically during editing operations. The issue is related to the admin/SEMCMS Menu.php endpoint, where the lgid parameter is used. For example, the...

PT-2018-14622

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found in the admin/SEMCMS Main.php URI, specifically via the fifth text box. Recommendations For SEMCMS version 3.4, update to a version that includes a fix for this issue, as...

PT-2018-14616

Name of the Vulnerable Software and Affected Versions SEMCMS version 3.4 Description A cross-site scripting XSS issue was found, allowing potential exploitation through the category key parameter in the "admin/SEMCMS Categories.php" endpoint, specifically when the parameters pid=1 and lgid=1 are...

SemCMS foreign trade website php version we***.php file has SQL injection vulnerability

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox , google, 360 and other mainstream browsers.SemCms php version written in php language, combined with apache, in window, or linux system to run...

SemCms php version V3.2 SQL injection vulnerability in frontend

SemCms is an open source foreign trade enterprise website management system , mainly for foreign trade enterprises , compatible with IE, Firefox and other mainstream browsers . SemCms php version V3.2 front-end SQL injection vulnerability , attackers can use the vulnerability to obtain the...

SemCms foreign trade website management system suffers from SQL injection vulnerability (CNVD-2018-21973)

SemCms is a set of open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox, google, 360 and other mainstream browsers. SemCms foreign trade website management system SQL injection vulnerability , the vulnerability stem...

SemCms php version V2.7 suffers from SQL Injection Vulnerability

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms php version V2.7 SQL injection vulnerability , attackers can use the vulnerability to obtain sensitive...

SemCms php version V2.7 is vulnerable to arbitrary password reset.

SemCms is an open source foreign trade enterprise website management system, mainly used for foreign trade enterprises, compatible with IE, Firefox and other mainstream browsers. SemCms php version V2.7 there is an arbitrary password reset vulnerability, attackers can use this vulnerability to...