https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2026-1552.htmlhttps://patchthecve.com/cve/CVE-2026-1552.htmlWed, 17 Jun 2026 10:16:03 +0000MEDIUM 6.3: A security vulnerability has been detected in SEMCMS 5.0. This vulnerability affects unknown code of the file /SEMCMS_Info.php. The manipulation of the argument searchml leads to sql injection. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be usedhttps://patchthecve.com/cve/CVE-2025-51660.htmlhttps://patchthecve.com/cve/CVE-2025-51660.htmlSun, 05 Jul 2026 01:21:55 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Products.php.https://patchthecve.com/cve/CVE-2025-51659.htmlhttps://patchthecve.com/cve/CVE-2025-51659.htmlSun, 05 Jul 2026 01:21:55 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Products.php.https://patchthecve.com/cve/CVE-2025-51658.htmlhttps://patchthecve.com/cve/CVE-2025-51658.htmlSun, 05 Jul 2026 01:21:55 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_InquiryView.php.https://patchthecve.com/cve/CVE-2025-51657.htmlhttps://patchthecve.com/cve/CVE-2025-51657.htmlSun, 05 Jul 2026 01:21:55 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the lgid parameter at SEMCMS_Link.php.https://patchthecve.com/cve/CVE-2025-51656.htmlhttps://patchthecve.com/cve/CVE-2025-51656.htmlSun, 05 Jul 2026 01:21:55 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMS_Link.php.https://patchthecve.com/cve/CVE-2025-51655.htmlhttps://patchthecve.com/cve/CVE-2025-51655.htmlSun, 05 Jul 2026 01:21:54 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Quanxian.php.https://patchthecve.com/cve/CVE-2025-51654.htmlhttps://patchthecve.com/cve/CVE-2025-51654.htmlSun, 05 Jul 2026 01:21:54 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Infocategories.php.https://patchthecve.com/cve/CVE-2025-51653.htmlhttps://patchthecve.com/cve/CVE-2025-51653.htmlSun, 05 Jul 2026 01:21:54 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_ct.php.https://patchthecve.com/cve/CVE-2025-51652.htmlhttps://patchthecve.com/cve/CVE-2025-51652.htmlSun, 05 Jul 2026 01:21:54 +0000MEDIUM 5.4: SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMS_Categories.php.https://patchthecve.com/cve/CVE-2025-25686.htmlhttps://patchthecve.com/cve/CVE-2025-25686.htmlWed, 17 Jun 2026 09:01:01 +0000CRITICAL 9.8: semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php.https://patchthecve.com/cve/CVE-2024-13193.htmlhttps://patchthecve.com/cve/CVE-2024-13193.htmlWed, 17 Jun 2026 07:01:25 +0000MEDIUM 6.3: A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is an unknown functionality of the file SEMCMS_Images.php of the component Image Library Management Page. The manipulation leads to sql injection. The attack can be launched remotely. The exhttps://patchthecve.com/cve/CVE-2024-53502.htmlhttps://patchthecve.com/cve/CVE-2024-53502.htmlWed, 17 Jun 2026 08:08:56 +0000LOW 3.8: Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page.https://patchthecve.com/cve/CVE-2024-52725.htmlhttps://patchthecve.com/cve/CVE-2024-52725.htmlSun, 05 Jul 2026 01:21:05 +0000MEDIUM 4.9: SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component.https://patchthecve.com/cve/CVE-2024-46103.htmlhttps://patchthecve.com/cve/CVE-2024-46103.htmlWed, 17 Jun 2026 07:55:11 +0000CRITICAL 9.8: SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php.https://patchthecve.com/cve/CVE-2024-4595.htmlhttps://patchthecve.com/cve/CVE-2024-4595.htmlWed, 17 Jun 2026 08:02:13 +0000MEDIUM 6.3: A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Thttps://patchthecve.com/cve/CVE-2024-32409.htmlhttps://patchthecve.com/cve/CVE-2024-32409.htmlThu, 09 Jul 2026 01:19:01 +0000HIGH 7.1: An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script.https://patchthecve.com/cve/CVE-2024-30938.htmlhttps://patchthecve.com/cve/CVE-2024-30938.htmlWed, 17 Jun 2026 07:27:32 +0000CRITICAL 9.8: SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to obtain sensitive information via the ID parameter in the SEMCMS_User.php component.https://patchthecve.com/cve/CVE-2024-31012.htmlhttps://patchthecve.com/cve/CVE-2024-31012.htmlWed, 17 Jun 2026 07:27:41 +0000CRITICAL 9.8: An issue was discovered in SEMCMS v.4.8, allows remote attackers to execute arbitrary code, escalate privileges, and obtain sensitive information via the upload.php file.https://patchthecve.com/cve/CVE-2024-31010.htmlhttps://patchthecve.com/cve/CVE-2024-31010.htmlWed, 17 Jun 2026 07:27:40 +0000HIGH 7.5: SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the ID parameter in Banner.php.https://patchthecve.com/cve/CVE-2024-31009.htmlhttps://patchthecve.com/cve/CVE-2024-31009.htmlWed, 17 Jun 2026 07:27:40 +0000MEDIUM 6.5: SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via lgid parameter in Banner.php.https://patchthecve.com/cve/CVE-2024-28405.htmlhttps://patchthecve.com/cve/CVE-2024-28405.htmlWed, 17 Jun 2026 07:21:24 +0000HIGH 7.2: SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.https://patchthecve.com/cve/CVE-2024-25422.htmlhttps://patchthecve.com/cve/CVE-2024-25422.htmlWed, 17 Jun 2026 07:16:00 +0000CRITICAL 9.8: SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component.https://patchthecve.com/cve/CVE-2023-48864.htmlhttps://patchthecve.com/cve/CVE-2023-48864.htmlWed, 17 Jun 2026 06:35:06 +0000HIGH 7.5: SEMCMS v4.8 was discovered to contain a SQL injection vulnerability via the languageID parameter in /web_inc.php.