← All advisories

Medium severity5.9NVD Advisory· Published Jun 4, 2024· Updated Jun 17, 2026

CVE-2024-36801

CVE-2024-36801

Description

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Sem CMS/Semcms2 versions
cpe:2.3:a:sem-cms:semcms:4.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sem-cms:semcms:4.8:*:*:*:*:*:*:*
- (no CPE)range: =4.8
SEMCMS/SEMCMSdescription

Patches

Vulnerability mechanics

References

1

github.com/want1997/SEMCMS_VUL/blob/main/Download_sql_vul_2.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.