Vulnerability Monitor

The vendors, products, and vulnerabilities you care about

CVE-2022-2726

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839.

Published

2022-08-09T07:15:07.327

Last Modified

2024-11-21T07:01:35.477

Status

Modified

Source

[email protected]

Severity

CVSSv3.1: 6.3 (MEDIUM)

Weaknesses

Type: Secondary
CWE-89

Affected Vendors & Products

Type	Vendor	Product	Version/Range	Vulnerable?
Application	sem-cms	semcms	-	Yes

References

https://github.com/G0mini/semcms/blob/main/README.md Broken Link ([email protected])
https://vuldb.com/?id.205839 Third Party Advisory ([email protected])
https://github.com/G0mini/semcms/blob/main/README.md Broken Link (af854a3a-2127-422b-91ae-364da2661108)
https://vuldb.com/?id.205839 Third Party Advisory (af854a3a-2127-422b-91ae-364da2661108)