CVE-2024-36800

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php...

CVE-2024-36800

A SQL injection vulnerability exists in SEMCMS v.4.8 . The flaw allows a remote attacker to obtain sensitive information by exploiting the ID parameter within the Download.php file. To mitigate this risk, it is recommended to update SEMCMS to a version where this issue is fixed.