SE
Product
Semcms
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 22High 10Medium 26Low 1
Watch
Add Semcms to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-1552 | 9.8 | Jan 29 | SEMCMS SEMCMS_Info.php sql injection Affected: 5.0 |
| CVE-2025-25686 | 9.8 | Mar 27 | semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php Affected: through 5.0 |
| CVE-2024-46103 | 9.8 | Sep 20 | SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php Affected: 4.8 |
| CVE-2024-30938 | 9.8 | Apr 19 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component Affected: 4.8 |
| CVE-2024-31012 | 9.8 | Apr 3 | An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file Affected: 4.8 |
| CVE-2024-25422 | 9.8 | Feb 28 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component Affected: 4.8 |
| CVE-2023-50563 | 9.8 | Dec 14 | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php Affected: 4.8 |
| CVE-2023-37647 | 9.8 | Jul 31 | SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php Affected: 1.5 |
| CVE-2020-18432 | 9.8 | Jun 30 | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges Affected: 3.7 |
| CVE-2023-31707 | 9.8 | May 19 | SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php Affected: 1.5 |
| CVE-2023-30090 | 9.8 | May 5 | Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php Affected: 4.2 |
| CVE-2021-38730 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php Affected: 1.1 |
| CVE-2021-38734 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php Affected: 1.1 |
| CVE-2021-38736 | 9.8 | Oct 28 | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php Affected: 1.1 |
| CVE-2021-38737 | 9.8 | Oct 28 | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php Affected: 1.1 |
| CVE-2021-38217 | 9.8 | Oct 28 | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php Affected: 1.2 |
| CVE-2021-38729 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php Affected: 1.1 |
| CVE-2021-38731 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php Affected: 1.1 |
| CVE-2021-38732 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php Affected: 1.1 |
| CVE-2021-38733 | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php Affected: 1.1 |
| CVE-2022-2726 | 9.8 | Aug 9 | SEMCMS Ant_Check.php sql injection Affected: All versions, or not specified |
| CVE-2020-18078 | 9.8 | Dec 17 | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password Affected: 3.8 |
Showing 22