SemCms vulnerabilities

SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the 'id' parameter in /Ant_Suxin.php. An attacker can manipulate this parameter to execute unauthorized database queries.

SQL injection vulnerability in SEMCMS (up to 5.0) in SEMCMS_Banner.php. Manipulation of input can lead to SQL injection, remotely exploitable.

SQL injection vulnerability in SEMCMS (up to 5.0) in SEMCMS_Download.php. Manipulation of input leads to SQL injection, remotely exploitable.

Improper authorization vulnerability in SEMCMS (up to 5.0) in /admin/SEMCMS_User.php?Class=Deleted&CF=user. Manipulation leads to improper authorization, remotely exploitable.

A vulnerability was found in SEMCMS up to version 4.2 in the file /Edit/php/upload_json.php. Manipulation of the imgFile argument causes cross site scripting. The attack may be initiated remotely and the exploit has been published.

SemCms 5.0 is vulnerable to Cross-Site Request Forgery (CSRF) via a crafted POST request to /admin/semcms_user.php.

SEMCMS 5.0 is vulnerable to unauthorized access in SEMCMS_copy.php.

A SQL injection vulnerability was discovered in SemCms v5.0 via the lgid parameter in SEMCMS_Products.php. An attacker can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the ID parameter in SEMCMS_Products.php. An attacker can manipulate this parameter to execute unauthorized database queries.

SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter in SEMCMS_InquiryView.php. An attacker can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the lgid parameter in SEMCMS_Link.php. Attackers can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the ID parameter in SEMCMS_Link.php. An attacker can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_Quanxian.php. Attackers can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_Infocategories.php. Attackers can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_ct.php. Attackers can exploit this flaw to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v5.0 via the pid parameter in SEMCMS_Categories.php. An attacker can manipulate this parameter to execute unauthorized database queries.

A SQL injection vulnerability was discovered in SemCms v4.8 in the SEMCMS_SeoAndTag.php component. An attacker can exploit the ldgid parameter to execute arbitrary SQL code.

A vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. The issue stems from insufficient input validation.