← All advisories

Critical severity9.8NVD Advisory· Published Dec 17, 2021· Updated Jun 17, 2026

CVE-2020-18078

CVE-2020-18078

Description

A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password.

Affected products

3

Sem CMS/Semcms2 versions
cpe:2.3:a:sem-cms:semcms:3.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sem-cms:semcms:3.8:*:*:*:*:*:*:*
- (no CPE)range: =3.8
SEMCMS/SEMCMSdescription

Patches

Vulnerability mechanics

References

1

github.com/cve-vul/vul/blob/master/SEMCMS/back_password_reset.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.