Semcms vulnerabilities
6 known vulnerabilities in Semcms from Sem-cms. 6 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 9.8 Critical severity
semcms: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component.
- 9.8 Critical severity
semcms: Unrestricted Upload of File with Dangerous Type
An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file.
- 7.2 High severity
semcms: Improper Access Control
SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.
- 9.8 Critical severity
Semcms: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component.
- 7.5 High severity
Semcms: Improper Neutralization of Special Elements used in an SQL Command
SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack
- 9.8 Critical severity
Semcms: Unrestricted Upload of File with Dangerous Type
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file.