Login Request a demo
SE
Product
Semcms
by Sem-cms · last CVE Jan 29, 2026
59
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities59In the news0Timeline
Severity mix
Critical 22High 10Medium 26Low 1
Severity
All severities59Critical22High10Medium26Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Semcms to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2018-18742
8.8
1%
Oct 29
A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI
Affected: 3.4
CVE-2024-36800
7.5
1%
Jun 4
A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php
Affected: 4.8
CVE-2024-31010
7.5
1%
Apr 3
SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php
Affected: 4.8
CVE-2023-48864
7.5
1%
Jan 10
SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php
Affected: 4.8
CVE-2023-48863
7.5
1%
Dec 4
SEMCMS 3.9 is vulnerable to SQL Injection
Affected: 3.9
CVE-2020-18081
7.5
1%
Dec 17
The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query
Affected: 3.8
CVE-2024-28405
7.2
1%
Mar 29
SEMCMS 4.8 is vulnerable to Incorrect Access Control
Affected: 4.8
CVE-2020-23564
7.2
1%
Aug 5
File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php
Affected: 3.9
CVE-2019-11518
7.2
1%
Apr 25
An issue was discovered in SEMCMS 3.8
Affected: 3.8
CVE-2024-32409
7.1
0%
Apr 19
An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script
Affected: 4.8
Showing 10