587 matches found
CVE-2021-38733
CVE-2021-38733 affects SEMCMS SHOP v1.1 with a SQL injection in Ant_BlogCat.php. All sources indicate a high-severity vulnerability (CVSS 3.1: 9.8) potentially allowing unauthorized database access without authentication. The connected documents do not provide exploit details or confirmed in-the-...
PT-2022-10764 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant BlogCat.php file. This allows for potential exploitation of the database. No information is provided about the estimated number of potentially affected...
CVE-2021-38729
CVE-2021-38729 affects SEMCMS SHOP version 1.1. The vulnerability is a SQL Injection in Ant_Plist.php, with CVSS v3.1 base score 9.8 (CRITICAL). Public references indicate a PoC exists and potential exploitation; details in the Adp entry note a total technical impact. Pending remediation: PT-2022...
CVE-2021-38734
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntMenu.php...
PT-2022-10759 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Plist.php file. Recommendations: For SEMCMS SHOP version 1.1, consider restricting access to the Ant Plist.php file as a temporary workaround until a patch...
SEMCMS 跨站脚本漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A cross-site scripting vulnerability exists in SEMCMS SHOP version 1.1, which stems from a cross-site scripting issue in AntMCoup.php...
CVE-2021-38728
CVE-2021-38728 affects SEMCMS SHOP v1.1, with a stored/reflected Cross-Site Scripting (XSS) vulnerability in Ant_M_Coup.php. The available sources indicate the issue resides in a web-exposed component, enabling an attacker to inject scripts that may be executed in a user’s browser, given network ...
CVE-2021-38737
SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...
PT-2022-10762 · Unknown · Semcms Shop
Name of the Vulnerable Software and Affected Versions: SEMCMS SHOP version 1.1 Description: The issue is related to SQL Injection via the Ant Zekou.php file. Recommendations: For SEMCMS SHOP version 1.1, update to a version that fixes the SQL Injection issue in Ant Zekou.php, if available. As a...
SEMCMS SQL注入漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.2, which stems from a SQL injection issue in SEMCMSUser.php...
CVE-2021-38217
SEMCMS 1.2 is affected by a SQL Injection vulnerability in SEMCMS_User.php. The issue, documented across multiple sources (CVE-2021-38217), is classified with CVSSv3.1 base score 9.8 (CRITICAL) and is exploitable remotely without privileges or user interaction. The vulnerability stems from input ...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2021-38730
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntInfo.php...
CVE-2021-38737
SEMCMS v 1.1 is vulnerable to SQL Injection via AntPro.php...
CVE-2021-38732
SEMCMS SHOP v 1.1 is vulnerable to SQL via AntMessage.php...
CVE-2021-38728
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting XSS via AntMCoup.php...
SEMCMS SQL注入漏洞
SEMCMS is a multilingual content management system CMS for foreign trade websites. A SQL injection vulnerability exists in SEMCMS SHOP version 1.1, which stems from a SQL injection issue in AntMessage.php...
CVE-2021-38733
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via AntBlogCat.php...
PT-2022-10699 · Semcms · Semcms
Name of the Vulnerable Software and Affected Versions: SEMCMS version 1.2 Description: The issue is related to SQL Injection via the SEMCMS User.php file. Recommendations: For SEMCMS version 1.2, update to a version that fixes the SQL Injection issue in SEMCMS User.php...