Remote Code Execution Vulnerability in SEMCMS v.4.8
CVE-2024-32409

7.1HIGH

Key Information:

Vendor

SEMCMS

Status
Semcms
Vendor
CVE Published:
19 April 2024

What is CVE-2024-32409?

A vulnerability in SEMCMS version 4.8 facilitates the execution of arbitrary code by remote attackers. By exploiting this flaw, attackers can inject crafted scripts that may allow them to compromise the integrity and confidentiality of the affected system. It is crucial for users and organizations utilizing SEMCMS to be aware of this risk, implement mitigations, and apply any available patches to safeguard against potential exploits.

References

http://www.sem-cms.com/
https://gitee.com/whats-the-bad-idea/cve

CVSS V3.1

Score:
7.1
Severity:
HIGH
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Changed

Timeline

  • Vulnerability published

.