Critical SQL Injection Vulnerability in SEMCMS Up to 4.8

CVE-2024-4595
6.3MEDIUM

Key Information

Vendor
SEMCMS
Status
Semcms
Vendor
CVE Published:
7 May 2024

Summary

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability.

Affected Version(s)

SEMCMS = 4.0

SEMCMS = 4.1

SEMCMS = 4.2

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • VulDB entry last update

  • Vulnerability Reserved.

  • VulDB entry created

  • Advisory disclosed

  • Vulnerability published.

Collectors

NVD DatabaseMitre Database

Credit

gatsby (VulDB User)
.