CVE-2025-51655

MediumCVSS 5.4

Published: 14/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_Quanxian.php. Attackers can manipulate this parameter to execute unauthorized database queries.

Risk Assessment

The risk includes potential leakage of sensitive data, modification or deletion of database records, and possible privilege escalation within the system.

Recommendation

Immediately update SemCms to the latest patched version and implement parameterized SQL queries in the source code to prevent injection attacks.

Original NVD description (English source)

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php.