PT-2025-29496
CVE-2025-51656
·
Published
2025-07-14
·
Updated
2025-10-31
Description by
CVSS 3.1
5.4
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions:
SemCms version 5.0
Description:
SemCms version 5.0 contains a SQL injection vulnerability through the
ID parameter at the SEMCMS Link.php file.Recommendations:
As a temporary workaround, consider restricting access to the SEMCMS Link.php file until a patch is available.
Sanitize the
ID parameter before using it in any SQL queries. Found an issue in the description? Have something to add? Feel free to write us 👾