Medium severity6.3NVD Advisory· Published May 7, 2024· Updated Jun 17, 2026

CVE-2024-4595

Description

A vulnerability has been found in SEMCMS up to 4.8 and classified as critical. Affected by this vulnerability is the function locate of the file function.php. The manipulation leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-263317 was assigned to this vulnerability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Sem CMS/Semcms2 versions
cpe:2.3:a:sem-cms:semcms:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:sem-cms:semcms:*:*:*:*:*:*:*:*range: <=4.8
- (no CPE)range: <=4.8
SEMCMS/SEMCMSdescription

Patches

Vulnerability mechanics

References

github.com/gatsby2003/Semcms/blob/main/semcms0-sqlinjection.mdnvdExploitThird Party Advisory
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdThird Party AdvisoryVDB Entry
vuldb.comnvdPermissions RequiredVDB Entry

News mentions

No linked articles in our index yet.

cvss	0.410
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000