CVE-2024-36801

A SQL injection vulnerability exists in SEMCMS v.4.8 within the Download.php script. The root cause is a lack of adequate measures to protect the SQL query structure, specifically regarding the lgid parameter. A remote attacker can exploit this to execute arbitrary SQL queries and gain unauthoriz...