CVE-2026-1552 | Medium | 6.3 | 2026-01-29 | A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argumen… |
CVE-2025-51660 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php. |
CVE-2025-51659 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php. |
CVE-2025-51658 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php. |
CVE-2025-51657 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php. |
CVE-2025-51656 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php. |
CVE-2025-51655 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php. |
CVE-2025-51654 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php. |
CVE-2025-51653 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php. |
CVE-2025-51652 | Medium | 5.4 | 2025-07-14 | SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php. |
CVE-2025-25686 | Critical | 9.8 | 2025-03-27 | semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php. |
CVE-2024-13193 | Medium | 6.3 | 2025-01-08 | A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Im… |
CVE-2024-53502 | Low | 3.8 | 2024-12-03 | Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page. |
CVE-2024-52725 | Medium | 4.9 | 2024-11-20 | SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_Se… |
CVE-2024-46103 | Critical | 9.8 | 2024-09-20 | SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. |
CVE-2024-36801 | Medium | 5.9 | 2024-06-04 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. |
CVE-2024-36800 | High | 7.5 | 2024-06-04 | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Download.php. |
CVE-2024-4595 | Medium | 6.3 | 2024-05-07 | A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php… |
CVE-2024-32409 | High | 7.1 | 2024-04-19 | An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. |
CVE-2024-30938 | Critical | 9.8 | 2024-04-19 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component. |
CVE-2024-31012 | Critical | 9.8 | 2024-04-03 | An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the uploa… |
CVE-2024-31010 | High | 7.5 | 2024-04-03 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. |
CVE-2024-31009 | Medium | 6.5 | 2024-04-03 | SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. |
CVE-2024-28405 | High | 7.2 | 2024-03-29 | SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page becau… |
CVE-2024-25422 | Critical | 9.8 | 2024-02-28 | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php compone… |
CVE-2023-48864 | High | 7.5 | 2024-01-10 | SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php. |
CVE-2023-50563 | Critical | 9.8 | 2023-12-14 | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. |
CVE-2023-48863 | High | 7.5 | 2023-12-04 | SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to in… |
CVE-2020-23564 | High | 7.2 | 2023-08-05 | File Upload vulnerability in SEMCMS 3.9 allows remote attackers to run arbitrary code via SEMCMS_Upfile.php. |
CVE-2023-37647 | Critical | 9.8 | 2023-07-31 | SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. |
CVE-2020-18432 | Critical | 9.8 | 2023-06-30 | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. |
CVE-2023-31707 | Critical | 9.8 | 2023-05-19 | SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. |
CVE-2023-30090 | Critical | 9.8 | 2023-05-05 | Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows attackers to e… |
CVE-2021-38733 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. |
CVE-2021-38732 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. |
CVE-2021-38731 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. |
CVE-2021-38730 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Info.php. |
CVE-2021-38729 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Plist.php. |
CVE-2021-38728 | Medium | 6.1 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. |
CVE-2021-38217 | Critical | 9.8 | 2022-10-28 | SEMCMS v 1.2 is vulnerable to SQL Injection via SEMCMS_User.php. |
CVE-2021-38737 | Critical | 9.8 | 2022-10-28 | SEMCMS v 1.1 is vulnerable to SQL Injection via Ant_Pro.php. |
CVE-2021-38736 | Critical | 9.8 | 2022-10-28 | SEMCMS Shop V 1.1 is vulnerable to SQL Injection via Ant_Global.php. |
CVE-2021-38734 | Critical | 9.8 | 2022-10-28 | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Menu.php. |
CVE-2022-2726 | Medium | 6.3 | 2022-08-09 | A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID l… |
CVE-2020-18081 | High | 7.5 | 2021-12-17 | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query. |
CVE-2020-18078 | Critical | 9.8 | 2021-12-17 | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. |
CVE-2019-11518 | High | 7.2 | 2019-04-25 | An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is i… |
CVE-2018-20017 | Medium | 4.8 | 2018-12-10 | SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI. |
CVE-2018-18841 | Medium | 4.8 | 2018-10-30 | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter. |
CVE-2018-18840 | Medium | 5.4 | 2018-10-30 | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter. |
CVE-2018-18783 | Medium | 6.1 | 2018-10-29 | XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter. |
CVE-2018-18745 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing. |
CVE-2018-18744 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI. |
CVE-2018-18743 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. |
CVE-2018-18742 | High | 8.8 | 2018-10-29 | A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI. |
CVE-2018-18741 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing. |
CVE-2018-18740 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI. |
CVE-2018-18739 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field. |
CVE-2018-18738 | Medium | 4.8 | 2018-10-29 | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter. |