CVE-2024-4595

Summary: CVE-2024-4595 affects SEMCMS up to version 4.8, with the vulnerability located in the locate function of function.php. The issue enables SQL injection due to improper validation of external input, and can be exploited remotely. Multiple connected sources corroborate the vulnerable compon...

PT-2024-31854 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS versions up to 4.8 Description: A critical issue has been found, affecting the locate function of the function.php file, leading to sql injection. The attack can be launched remotely. Recommendations: For SEMCMS versions up to 4.8: Pat...

SEMCMS SQL注入漏洞

SEMCMS is a foreign trade web content management system CMS that supports multiple languages. SEMCMS 4.8 and earlier versions suffer from a SQL injection vulnerability, which stems from the application's lack of validation of external input SQL statements, and can be exploited by attackers to...

CVE-2024-32409

An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2024-32409

An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2024-30938

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

CVE-2024-32409

An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...

PT-2024-24553 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: An issue in SEMCMS allows a remote attacker to execute arbitrary code via a crafted script. Recommendations: For SEMCMS version 4.8, at the moment, there is no information about a newer version that contains a...

CVE-2024-32409

An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script...

CVE-2024-32409

CVE-2024-32409 affects SEMCMS v4.8. The supplied connected sources confirm a remote attacker can execute arbitrary code via a crafted script in SEMCMS, with the root cause described only as the crafted-script input affecting SEMCMS v4.8. The vulnerability is categorized as high-severity (CVSS v3....

CVE-2024-30938

The CVE-2024-30938 issue affects SEMCMS v4.8 and originates from a SQL injection in the SEMCMS_User.php component, allowing a remote attacker to obtain sensitive information via the ID parameter. The vulnerability is described across multiple sources as a SQLi in SEMCMS v4.8 with high impact (con...

CVE-2024-30938

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

PT-2024-23682 · Semcms · Semcms

Name of the Vulnerable Software and Affected Versions: SEMCMS version 4.8 Description: The issue allows a remote attacker to obtain sensitive information. This is achieved via the ID parameter in the SEMCMS User.php component. Recommendations: For SEMCMS version 4.8, avoid using the ID parameter ...

CVE-2024-30938

SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...

SEMCMS 安全漏洞

SEMCMS is a foreign trade website content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originates from a SQL injection vulnerability in the ID parameter of the SEMCMSUser.php component...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31012

An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file...

CVE-2024-31009

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php...

CVE-2024-31010

SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php...

SEMCMS 安全漏洞

SEMCMS is a foreign trade website content management system CMS that supports multiple languages. A security vulnerability exists in SEMCMS v.4.8, which originates from a SQL injection vulnerability in the ID parameter in Banner.php...