Browse CVEs

CRITICAL 9.8 CVE-2026-1552 A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of t… Semcms Mitigation only Fix from $2,3002026-01-29 MEDIUM 5.4 CVE-2025-51655 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51656 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51657 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51658 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51659 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51660 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51652 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51653 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php. Semcms after 5.0 Fix from $1,6002025-07-14 MEDIUM 5.4 CVE-2025-51654 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php. Semcms after 5.0 Fix from $1,6002025-07-14 CRITICAL 9.8 CVE-2025-25686 semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php. Semcms after 5.0 Fix from $2,3002025-03-27 CRITICAL 9.8 CVE-2024-46103 SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. Semcms No fix yet Fix from $2,3002024-09-20 HIGH 7.5 CVE-2024-36800 A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. Semcms No fix yet Fix from $1,9502024-06-04 MEDIUM 5.9 CVE-2024-36801 A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. Semcms No fix yet Fix from $1,6002024-06-04 MEDIUM 6.5 CVE-2024-4595 A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file func… Semcms after 4.8 Fix from $1,6002024-05-07 HIGH 7.1 CVE-2024-32409 An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. Semcms Mitigation only Fix from $1,9502024-04-19 CRITICAL 9.8 CVE-2024-30938 SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php comp… Semcms Mitigation only Fix from $2,3002024-04-19 CRITICAL 9.8 CVE-2024-31012 An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via… Semcms No fix yet Fix from $2,3002024-04-03 HIGH 7.5 CVE-2024-31010 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. Semcms No fix yet Fix from $1,9502024-04-03 MEDIUM 6.5 CVE-2024-31009 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. Semcms No fix yet Fix from $1,6002024-04-03 HIGH 7.2 CVE-2024-28405 SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin … Semcms No fix yet Fix from $1,9502024-03-29 CRITICAL 9.8 CVE-2024-25422 SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.p… Semcms No fix yet Fix from $2,3002024-02-28 HIGH 7.5 CVE-2023-48864 SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. Semcms No fix yet Fix from $1,9502024-01-10 CRITICAL 9.8 CVE-2023-50563 Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. Semcms No fix yet Fix from $2,3002023-12-14 HIGH 7.5 CVE-2023-48863 SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing applica… Semcms No fix yet Fix from $1,9502023-12-04 HIGH 7.2 CVE-2020-23564 File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. Semcms No fix yet Fix from $1,9502023-08-05 CRITICAL 9.8 CVE-2023-37647 SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. Semcms Mitigation only Fix from $2,3002023-07-31 CRITICAL 9.8 CVE-2020-18432 File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. Semcms Mitigation only Fix from $2,3002023-06-30 CRITICAL 9.8 CVE-2023-31707 SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. Semcms No fix yet Fix from $2,3002023-05-19 CRITICAL 9.8 CVE-2023-30090 Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows atta… Semcms Mitigation only Fix from $2,3002023-05-05