PT-2023-23426 · Semcms · Semcms

CVE-2023-31707

·

Publicado

2023-05-19

·

Atualizado

2025-01-21

CVSS v3.1

9.8

Crítica

VetorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SEMCMS version 1.5
Description The issue is related to SQL Injection via the Ant Rponse.php file.
Recommendations For SEMCMS version 1.5, update to a version that fixes the SQL Injection issue in Ant Rponse.php, however, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

SQL injection

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-89

Identificadores relacionados

CVE-2023-31707

Produtos afetados

Semcms