CVE-2024-36801

A SQL injection vulnerability exists in SEMCMS v.4.8 within the Download.php script. The root cause is a lack of measures to protect the SQL query structure , specifically involving the lgid parameter. This flaw allows a remote attacker to execute arbitrary SQL queries and gain unauthorized acces...