CVE-2025-51652

MediumCVSS 5.4

Published: 14/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_Categories.php. An attacker can manipulate this parameter to execute unauthorized database queries.

Risk Assessment

The risk involves unauthorized access to database data, its modification or deletion, potentially compromising system confidentiality and integrity.

Recommendation

Immediately update SemCms to the latest version that includes a fix for this vulnerability. If an update is unavailable, implement input validation and sanitization for the pid parameter in the source code.

Original NVD description (English source)

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php.