Login Request a demo
SE
Product
Semcms
by Sem-cms · last CVE Jan 29, 2026
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 22High 10Medium 26Low 1
Severity
All severities59Critical22High10Medium26Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Semcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-1552
9.8
0%
Jan 29
A security vulnerability has been detected in SEMCMS 5.0
Affected: 5.0
CVE-2025-25686
9.8
1%
Mar 27
semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php
Affected: through 5.0
CVE-2024-46103
9.8
1%
Sep 20
SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php
Affected: 4.8
CVE-2024-30938
9.8
1%
Apr 19
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component
Affected: 4.8
CVE-2024-31012
9.8
1%
Apr 3
An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file
Affected: 4.8
CVE-2024-25422
9.8
1%
Feb 28
SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component
Affected: 4.8
CVE-2023-50563
9.8
1%
Dec 14
Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php
Affected: 4.8
CVE-2023-37647
9.8
1%
Jul 31
SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php
Affected: 1.5
CVE-2020-18432
9.8
1%
Jun 30
File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges
Affected: 3.7
CVE-2023-31707
9.8
1%
May 19
SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php
Affected: 1.5
CVE-2023-30090
9.8
1%
May 5
Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php
Affected: 4.2
CVE-2021-38730
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php
Affected: 1.1
CVE-2021-38734
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php
Affected: 1.1
CVE-2021-38736
9.8
1%
Oct 28
SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php
Affected: 1.1
CVE-2021-38737
9.8
1%
Oct 28
SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php
Affected: 1.1
CVE-2021-38217
9.8
1%
Oct 28
SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php
Affected: 1.2
CVE-2021-38729
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php
Affected: 1.1
CVE-2021-38731
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php
Affected: 1.1
CVE-2021-38732
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php
Affected: 1.1
CVE-2021-38733
9.8
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php
Affected: 1.1
CVE-2022-2726
9.8
1%
Aug 9
SEMCMS Ant_Check.php sql injection
Affected: All versions, or not specified
CVE-2020-18078
9.8
1%
Dec 17
A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password
Affected: 3.8
CVE-2018-18742
8.8
1%
Oct 29
A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI
Affected: 3.4
CVE-2024-36800
7.5
1%
Jun 4
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php
Affected: 4.8
CVE-2024-31010
7.5
1%
Apr 3
SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php
Affected: 4.8
CVE-2023-48864
7.5
1%
Jan 10
SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php
Affected: 4.8
CVE-2023-48863
7.5
1%
Dec 4
SEMCMS 3.9 is vulnerable to SQL Injection
Affected: 3.9
CVE-2020-18081
7.5
1%
Dec 17
The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query
Affected: 3.8
CVE-2024-28405
7.2
1%
Mar 29
SEMCMS 4.8 is vulnerable to Incorrect Access Control
Affected: 4.8
CVE-2020-23564
7.2
1%
Aug 5
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php
Affected: 3.9
CVE-2019-11518
7.2
1%
Apr 25
An issue was discovered in SEMCMS 3.8
Affected: 3.8
CVE-2024-32409
7.1
0%
Apr 19
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script
Affected: 4.8
CVE-2024-4595
6.5
1%
May 7
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical
Affected: through 4.8
CVE-2024-31009
6.5
1%
Apr 3
SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php
Affected: 4.8
CVE-2021-38728
6.1
1%
Oct 28
SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php
Affected: 1.1
CVE-2018-18783
6.1
1%
Oct 29
XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter
Affected: 3.4
CVE-2024-36801
5.9
0%
Jun 4
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php
Affected: 4.8
CVE-2025-51660
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php
Affected: through 5.0
CVE-2025-51659
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php
Affected: through 5.0
CVE-2025-51658
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php
Affected: through 5.0
CVE-2025-51657
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php
Affected: through 5.0
CVE-2025-51656
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php
Affected: through 5.0
CVE-2025-51655
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php
Affected: through 5.0
CVE-2025-51654
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php
Affected: through 5.0
CVE-2025-51653
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php
Affected: through 5.0
CVE-2025-51652
5.4
0%
Jul 14
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php
Affected: through 5.0
CVE-2018-18840
5.4
1%
Oct 30
XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter
Affected: 3.4
CVE-2024-13193
4.9
1%
Jan 8
SEMCMS Image Library Management Page SEMCMS_Images.php sql injection
Affected: through 4.8
CVE-2024-52725
4.9
1%
Nov 20
SemCms v4.8 was discovered to contain a SQL injection vulnerability
Affected: 4.8
CVE-2018-20017
4.8
1%
Dec 10
SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI
Affected: 3.5
Page 1 of 2 · 59 total
12