Approved changes feed: RSS · Atom

cpe:2.3:a:sem-cms:semcms:3.8:*:*:*:*:*:*:*

part: a version: 3.8 update: *

VendorSem Cms (1806736d-dc41-5ec3-8a66-07dfdaa6ba4a)
ProductSemcms (e19e6637-45c3-56e9-979b-28c9c41adc5b)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/avaterxxx/semcms purl2cpe 2026-06-01 10:15:46.064643

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-18081 vulnerable 2026-06-08 05:20:56.838574 Details available
The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query.
Published: 2021-12-17T16:15:44.000Z
Updated: 2024-08-04T14:00:49.098Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-18078 vulnerable 2026-06-08 05:20:56.838063 Details available
A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.
Published: 2021-12-17T16:13:58.000Z
Updated: 2024-08-04T14:00:48.807Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-11518 vulnerable 2026-06-08 05:12:37.499532 Details available
An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete.
Published: 2019-04-25T12:12:36.000Z
Updated: 2024-08-04T22:55:40.608Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.