Approved changes feed: RSS · Atom

cpe:2.3:a:n/a:semcms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorN/A (22f567d3-1203-528c-8f0e-3eb9c2f6ca78)
ProductSemcms (95c0572e-9487-5944-be14-cf4f4c85af6a)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-1552 vulnerable 2026-06-08 07:49:08.875455 SEMCMS SEMCMS_Info.php sql injection
MEDIUM (6.3)
A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-01-29T00:02:06.546Z
Updated: 2026-02-23T09:03:26.616Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-4595 vulnerable 2026-06-08 06:50:18.224101 SEMCMS function.php locate sql injection
MEDIUM (6.3)
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability.
Published: 2024-05-07T15:00:04.967Z
Updated: 2024-08-01T20:47:41.429Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2024-13193 vulnerable 2026-06-08 06:25:36.934522 SEMCMS Image Library Management Page SEMCMS_Images.php sql injection
MEDIUM (6.3)
A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2025-01-08T23:00:17.162Z
Updated: 2025-01-09T16:25:08.131Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.