15 matches found
CVE-2019-11518
An issue was discovered in SEMCMS 3.8. SEMCMSInquiry.php allows AID SQL Injection because the class.phpmailer.php injectchecksql protection mechanism is incomplete...
EUVD-2019-3189
Malware in sbrugna...
EUVD-2025-21372
Malicious code in bioql PyPI...
EUVD-2025-21367
Malicious code in bioql PyPI...
CVE-2025-51659
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSProducts.php...
CVE-2025-51658
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSInquiryView.php...
CVE-2025-51656
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSLink.php...
CVE-2025-51652
Summary: CVE-2025-51652 affects SemCms v5.0, where a SQL injection can be triggered via the pid parameter in SEMCMS_Categories.php. The vulnerability is confirmed across multiple sources (NVD, Red Hat, CVE list, PT Security, CNNVD, etc.). Impact: confidentiality and integrity impacts are listed a...
CVE-2025-51655
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...
CVE-2025-51655
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSQuanxian.php...
CVE-2025-51656
CVE-2025-51656 affects SemCms v5.0, with a SQL injection in SEMCMS_Link.php via the ID parameter. Primary impact is unauthorized SQL access, as indicated by public records; exploitation details are not explicitly provided in the initial documents. A temporary remediation found in PT-2025-29496 su...
CVE-2025-51652
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSCategories.php...
CVE-2024-52725
SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMSSeoAndTag.php component...
PT-2023-30991 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 3.9 Description: The issue is related to SQL Injection due to the lack of security checks on the input of the application. An attacker can inject malicious SQL commands into the background database engine for execution, sending...
SEMCMS suffers from SQL injection vulnerability (CNVD-2021-29215)
SEMCMS is a self-developed open source online store btc system. SEMCMS suffers from a SQL injection vulnerability, which can be exploited by attackers to obtain sensitive information from the database...