CVE-2023-37647

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /AntSuxin.php...

PT-2023-26058 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.5 Description: The issue is a SQL injection vulnerability. It can be exploited via the id parameter at the "/Ant Suxin.php" API endpoint. Recommendations: For SEMCMS version 1.5, as a temporary workaround, consider restrictin...