CVE-2025-51656

MediumCVSS 5.4

Published: 14/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

A SQL injection vulnerability was discovered in SemCms v5.0 via the ID parameter in SEMCMS_Link.php. An attacker can manipulate this parameter to execute unauthorized database queries.

Risk Assessment

The risk involves unauthorized database access, potentially leading to data leakage, modification, deletion, or full application compromise.

Recommendation

Immediately update SemCms to the latest patched version. If unavailable, implement input validation and sanitization for the ID parameter in SEMCMS_Link.php.

Original NVD description (English source)

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php.