SE
Vendor
Sem-cms
59
CVEs
0
On KEV
0
New 30D
Products
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2026-1552 | SE Semcms Sem-cms | 9.8 | Jan 29 | A security vulnerability has been detected in SEMCMS 5.0 |
| CVE-2025-51660 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php |
| CVE-2025-51659 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php |
| CVE-2025-51658 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php |
| CVE-2025-51657 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php |
| CVE-2025-51656 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php |
| CVE-2025-51655 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php |
| CVE-2025-51654 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php |
| CVE-2025-51653 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php |
| CVE-2025-51652 | SE Semcms Sem-cms | 5.4 | Jul 14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php |
| CVE-2025-25686 | SE Semcms Sem-cms | 9.8 | Mar 27 | semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php |
| CVE-2024-13193 | SE Semcms Sem-cms | 4.9 | Jan 8 | SEMCMS Image Library Management Page SEMCMS_Images.php sql injection |
| CVE-2024-53502 | SE Semcms Sem-cms | 3.8 | Dec 3 | Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page |
| CVE-2024-52725 | SE Semcms Sem-cms | 4.9 | Nov 20 | SemCms v4.8 was discovered to contain a SQL injection vulnerability |
| CVE-2024-46103 | SE Semcms Sem-cms | 9.8 | Sep 20 | SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php |
| CVE-2024-36801 | SE Semcms Sem-cms | 5.9 | Jun 4 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php |
| CVE-2024-36800 | SE Semcms Sem-cms | 7.5 | Jun 4 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php |
| CVE-2024-4595 | SE Semcms Sem-cms | 6.5 | May 7 | A vulnerability has been found in SEMCMS up to 4.8 and classified as critical |
| CVE-2024-32409 | SE Semcms Sem-cms | 7.1 | Apr 19 | An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script |
| CVE-2024-30938 | SE Semcms Sem-cms | 9.8 | Apr 19 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component |
| CVE-2024-31012 | SE Semcms Sem-cms | 9.8 | Apr 3 | An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file |
| CVE-2024-31010 | SE Semcms Sem-cms | 7.5 | Apr 3 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php |
| CVE-2024-31009 | SE Semcms Sem-cms | 6.5 | Apr 3 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php |
| CVE-2024-28405 | SE Semcms Sem-cms | 7.2 | Mar 29 | SEMCMS 4.8 is vulnerable to Incorrect Access Control |
| CVE-2024-25422 | SE Semcms Sem-cms | 9.8 | Feb 28 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component |
| CVE-2023-48864 | SE Semcms Sem-cms | 7.5 | Jan 10 | SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php |
| CVE-2023-50563 | SE Semcms Sem-cms | 9.8 | Dec 14 | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php |
| CVE-2023-48863 | SE Semcms Sem-cms | 7.5 | Dec 4 | SEMCMS 3.9 is vulnerable to SQL Injection |
| CVE-2020-23564 | SE Semcms Sem-cms | 7.2 | Aug 5 | File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php |
| CVE-2023-37647 | SE Semcms Sem-cms | 9.8 | Jul 31 | SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php |
| CVE-2020-18432 | SE Semcms Sem-cms | 9.8 | Jun 30 | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges |
| CVE-2023-31707 | SE Semcms Sem-cms | 9.8 | May 19 | SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php |
| CVE-2023-30090 | SE Semcms Sem-cms | 9.8 | May 5 | Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php |
| CVE-2021-38731 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php |
| CVE-2021-38730 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php |
| CVE-2021-38729 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php |
| CVE-2021-38728 | SE Semcms Sem-cms | 6.1 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php |
| CVE-2021-38217 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php |
| CVE-2021-38737 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php |
| CVE-2021-38734 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php |
| CVE-2021-38736 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php |
| CVE-2021-38733 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php |
| CVE-2021-38732 | SE Semcms Sem-cms | 9.8 | Oct 28 | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php |
| CVE-2022-2726 | SE Semcms Sem-cms | 9.8 | Aug 9 | SEMCMS Ant_Check.php sql injection |
| CVE-2020-18081 | SE Semcms Sem-cms | 7.5 | Dec 17 | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query |
| CVE-2020-18078 | SE Semcms Sem-cms | 9.8 | Dec 17 | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password |
| CVE-2019-11518 | SE Semcms Sem-cms | 7.2 | Apr 25 | An issue was discovered in SEMCMS 3.8 |
| CVE-2018-20017 | SE Semcms Sem-cms | 4.8 | Dec 10 | SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI |
| CVE-2018-18841 | SE Semcms Sem-cms | 4.8 | Oct 30 | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter |
| CVE-2018-18840 | SE Semcms Sem-cms | 5.4 | Oct 30 | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter |
| CVE-2018-18783 | SE Semcms Sem-cms | 6.1 | Oct 29 | XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter |
| CVE-2018-18745 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing |
| CVE-2018-18744 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI |
| CVE-2018-18743 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI |
| CVE-2018-18742 | SE Semcms Sem-cms | 8.8 | Oct 29 | A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI |
| CVE-2018-18741 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing |
| CVE-2018-18740 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI |
| CVE-2018-18739 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field |
| CVE-2018-18738 | SE Semcms Sem-cms | 4.8 | Oct 29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter |