PT-2022-10767

CVE-2021-38737

Published

2022-10-28

Updated

2022-10-28

CVSS 3.1

9.8

Critical

MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SEMCMS version 1.1

Description The issue is related to SQL Injection via the Ant Pro.php file.

Recommendations For SEMCMS version 1.1, consider restricting access to the Ant Pro.php file as a temporary workaround until a patch is available.

Exploitability

Exploit

Fix

Impacts

Researchers

Vendors

Affected products

Weakness enumeration

Related identifiers

Found an issue in the description? Have something to add? Feel free to write us 👾