CVE-2024-28405
7.2HIGHSEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from
Published: 3/29/2024Updated: 4/4/2025
Description
SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.
AI AnalysisPowered by AI
Affected Products
sem-cmssemcms
4.8
References
- https://github.com/turabiaslan/semcmsExploitThird Party Advisory
- https://github.com/turabiaslan/semcms/blob/main/README.mdExploitThird Party Advisory
- https://github.com/turabiaslan/semcmsExploitThird Party Advisory
- https://github.com/turabiaslan/semcms/blob/main/README.mdExploitThird Party Advisory