Executive brief
SemCms, a content management system used for building e-commerce and corporate websites, contains a security flaw in its product classification component. An attacker with basic user access can exploit this flaw to gain unauthorized access to the website's database. This could lead to the theft of sensitive business information or the modification of website content.
Technical details
A SQL injection vulnerability exists in SemCms versions up to and including 5.0. The flaw is located in the 'pid' parameter within the SEMCMS_ct.php file. An attacker with low-privileged (authenticated) access can submit specially crafted SQL queries through this parameter to bypass intended database queries. Successful exploitation allows the attacker to read sensitive data from the database, modify records, or potentially gain administrative (DBA) permissions depending on the database configuration. The vulnerability stems from improper neutralization of special elements used in SQL commands (CWE-89).
Affected products
- SemCms SemCms <= 5.0
Timeline
- 2025-07-14: disclosed: Initial disclosure of the vulnerability and CVE assignment.
- 2025-07-14: advisory: NVD published the vulnerability details.