PT-2022-10767 · Semcms · Semcms

·

CVE-2021-38737

·

Published

2022-10-28

·

Updated

2022-10-28

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SEMCMS version 1.1
Description The issue is related to SQL Injection via the Ant Pro.php file.
Recommendations For SEMCMS version 1.1, consider restricting access to the Ant Pro.php file as a temporary workaround until a patch is available.

Exploit

Fix

SQL injection

Found an issue in the description? Have something to add? Feel free to write us 👾

Weakness Enumeration

Related Identifiers

CVE-2021-38737

Affected Products

Semcms