CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31009

A SQL injection vulnerability exists in SEMCMS v.4.8 . The flaw is triggered via the lgid parameter in the Banner.php file, which allows a remote attacker to obtain sensitive information . To mitigate this risk until a patch is released, it is recommended to restrict access to the Banner.php file...