CVE-2025-51658

MediumCVSS 5.4

Published: 14/07/2025(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.22%

13th percentile - higher than 13% of all known CVEs

Summary

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter in SEMCMS_InquiryView.php. An attacker can manipulate this parameter to execute unauthorized database queries.

Risk Assessment

The risk involves potential unauthorized access to database data, modification, or deletion, which could compromise system confidentiality and integrity.

Recommendation

Immediately update SemCms to the latest version that fixes this vulnerability and implement parameterized SQL queries in the source code.

Original NVD description (English source)

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php.