Threats affecting pkg:github/turabiaslan/semcms

11 threats

Severity	CVSS	Signals	Threat	Source	Published
Medium	5.4	EPSS 0.3%	CVE-2025-51660SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51660 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51658SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51658 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51657SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51657 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51656SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51656 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51655SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51655 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51653SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51653 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Medium	5.4	EPSS 0.3%	CVE-2025-51652SemCms · SQL Injection Medium5.4EPSS 0.3%2025-07-14CVE Database V5CVE-2025-51652 SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php. EPSS 0.3%Vulnerability CWE-89	CVE Database V5	2025-07-14
Critical	9.8	EPSS 0.5%	CVE-2024-46103SEMCMS · Code Injection Critical9.8EPSS 0.5%2024-09-20CVE Database V5CVE-2024-46103 SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. EPSS 0.5%Vulnerability CWE-94	CVE Database V5	2024-09-20
High	7.5	EPSS 0.8%	CVE-2024-31010semcms · SQL Injection High7.5EPSS 0.8%2024-04-03CVE Database V5CVE-2024-31010 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php. EPSS 0.8%Vulnerability CWE-89	CVE Database V5	2024-04-03
Medium	6.5	EPSS 0.7%	CVE-2024-31009semcms · SQL Injection Medium6.5EPSS 0.7%2024-04-03CVE Database V5CVE-2024-31009 SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php. EPSS 0.7%Vulnerability CWE-89	CVE Database V5	2024-04-03
High	7.2	EPSS 0.8%	CVE-2024-28405semcms · Improper Access Control High7.2EPSS 0.8%2024-03-29CVE Database V5CVE-2024-28405 SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges. EPSS 0.8%Vulnerability CWE-284	CVE Database V5	2024-03-29

Page 1 of 1