Executive brief
SemCms, a content management system used for building e-commerce and corporate websites, contains a security vulnerability in its category management component. An attacker with basic user privileges can exploit this flaw to interact directly with the website's database. This could lead to the unauthorized viewing or modification of sensitive business data, potentially compromising customer information or site integrity.
Technical details
A SQL injection vulnerability exists in SemCms v5.0 within the SEMCMS_Categories.php file. The vulnerability is rooted in the improper neutralization of special elements within the 'pid' parameter. An authenticated attacker with low-level privileges can send specially crafted network requests to execute arbitrary SQL commands against the backend database. This can result in unauthorized data retrieval or modification. A Proof of Concept (PoC) has been disclosed publicly. Users should monitor the vendor's site for patches or implement input validation on the affected parameter.
Affected products
- SemCms SemCms 5.0
Timeline
- 2025-07-14: disclosed: Initial vulnerability disclosure and CVE assignment.
- 2025-07-14: advisory: NVD published the vulnerability details.