PT-2022-10699 · Semcms · Semcms

CVE-2021-38217 · Published 2022-10-28 · Updated 2025-05-08

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SEMCMS version 1.2

Description The issue is related to SQL Injection via the SEMCMS User.php file.

Recommendations For SEMCMS version 1.2, update to a version that fixes the SQL Injection issue in SEMCMS User.php.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-38217

Affected Products

Semcms

References · 5

• 🔥 https://github.com/BigTiger2020/SEMCMS/blob/main/semcms-1.2-sql-2.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-38217 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38217 · Vendor Advisory
• https://t.me/cibsecurity/52233 · Telegram Post
• https://t.me/cvenotify/121472 · Telegram Post