Product:

Semcms

(Sem\-Cms)
Repositories

Unknown:

This might be proprietary software.
#Vulnerabilities 35
Date Id Summary Products Score Patch Annotated
2021-12-17 CVE-2020-18078 A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. Semcms 9.8
2021-12-17 CVE-2020-18081 The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query. Semcms 7.5
2022-08-09 CVE-2022-2726 A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839. Semcms 9.8
2023-06-30 CVE-2020-18432 File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. Semcms 9.8
2023-07-31 CVE-2023-37647 SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. Semcms 9.8
2023-08-05 CVE-2020-23564 File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. Semcms 7.2
2023-12-14 CVE-2023-50563 Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. Semcms 9.8
2019-04-25 CVE-2019-11518 An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete. Semcms 7.2
2018-12-10 CVE-2018-20017 SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI. Semcms 4.8
2018-10-30 CVE-2018-18841 XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter. Semcms 4.8