Browse CVEs

CRITICAL 9.8 CVE-2026-1552 A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of t… Semcms Mitigation only Fix from $2,3002026-01-29 CRITICAL 9.8 CVE-2024-46103 SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. Semcms No fix yet Fix from $2,3002024-09-20 HIGH 7.5 CVE-2024-36800 A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. Semcms No fix yet Fix from $1,9502024-06-04 MEDIUM 5.9 CVE-2024-36801 A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. Semcms No fix yet Fix from $1,6002024-06-04 HIGH 7.1 CVE-2024-32409 An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. Semcms Mitigation only Fix from $1,9502024-04-19 CRITICAL 9.8 CVE-2024-30938 SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php comp… Semcms Mitigation only Fix from $2,3002024-04-19 CRITICAL 9.8 CVE-2024-31012 An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via… Semcms No fix yet Fix from $2,3002024-04-03 HIGH 7.5 CVE-2024-31010 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. Semcms No fix yet Fix from $1,9502024-04-03 MEDIUM 6.5 CVE-2024-31009 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. Semcms No fix yet Fix from $1,6002024-04-03 HIGH 7.2 CVE-2024-28405 SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin … Semcms No fix yet Fix from $1,9502024-03-29 CRITICAL 9.8 CVE-2024-25422 SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.p… Semcms No fix yet Fix from $2,3002024-02-28 HIGH 7.5 CVE-2023-48864 SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. Semcms No fix yet Fix from $1,9502024-01-10 CRITICAL 9.8 CVE-2023-50563 Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. Semcms No fix yet Fix from $2,3002023-12-14 HIGH 7.5 CVE-2023-48863 SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing applica… Semcms No fix yet Fix from $1,9502023-12-04 HIGH 7.2 CVE-2020-23564 File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. Semcms No fix yet Fix from $1,9502023-08-05 CRITICAL 9.8 CVE-2023-37647 SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. Semcms Mitigation only Fix from $2,3002023-07-31 CRITICAL 9.8 CVE-2020-18432 File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. Semcms Mitigation only Fix from $2,3002023-06-30 CRITICAL 9.8 CVE-2023-31707 SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. Semcms No fix yet Fix from $2,3002023-05-19 CRITICAL 9.8 CVE-2023-30090 Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows atta… Semcms Mitigation only Fix from $2,3002023-05-05 CRITICAL 9.8 CVE-2021-38730 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38731 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38732 SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38733 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38217 SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38729 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php. Semcms No fix yet Fix from $2,3002022-10-28 MEDIUM 6.1 CVE-2021-38728 SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. Semcms No fix yet Fix from $1,6002022-10-28 CRITICAL 9.8 CVE-2021-38734 SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38736 SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2021-38737 SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. Semcms No fix yet Fix from $2,3002022-10-28 CRITICAL 9.8 CVE-2022-2726 A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argu… Semcms Mitigation only Fix from $2,3002022-08-09