CVE-2026-39169

SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMScopy.php...

PT-2026-48214

SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcms user.php...

PT-2025-29500 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SemCms version 5.0 Description: SemCms version 5.0 contains a SQL injection vulnerability. The vulnerability is located in the lgid parameter at the SEMCMS Products.php file. Recommendations: As a temporary workaround, consider restricting...

CVE-2025-51653

CVE-2025-51653 affects SemCms v5.0, where a SQL injection is possible through the pid parameter in SEMCMS_ct.php. The issue, described across multiple feeds (NVD, Red Hat, CVE listing, and PT Security), has a CVSS v3.1 base score of 5.4 (Medium) with network attack vector, low attack complexity, ...