11 matches found
CVE-2026-108812
A security vulnerability exists in SEMCMS versions up to 5.0 due to improper authorization within an unknown function of the file /admin/SEMCMS_User.php?Class=Deleted&CF=user. This flaw allows for remote manipulation, potentially leading to unauthorized actions. The vendor has not responded to re...
EUVD-2026-97285
A security vulnerability has been detected in SEMCMS up to 5.0. The impacted element is an unknown function of the file /admin/SEMCMSUser.php?Class=Deleted&CF=user. Such manipulation leads to improper authorization. The attack may be performed from remote. The exploit has been disclosed publicly...
CVE-2026-39170: Cross-Site Request Forgery (CSRF)
SemCms 5.0 is vulnerable to Cross Site Request Forgery CSRF via crafted POST request to /admin/semcmsuser.php...
EUVD-2021-24675
Malware in sbrugna...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2024-30938: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2024-30938
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMSUser.php component...
CVE-2021-38217
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2021-38217: Improper Neutralization of Special Elements used in an SQL Command
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMSUser.php...
CVE-2018-18742
CVE-2018-18742 concerns SEMCMS 3.4, where a cross-site request forgery (CSRF) vulnerability exists in the admin flow accessed via the URI admin/SEMCMS_User.php?Class=add&CF=user. The issue, described as CSRF, could enable unauthorized operations on behalf of an authenticated user. CVSS metrics fr...