Overview 113 matches · 0 in Waratek scope · 0 protected · 0 exploited · 0 CISA KEV · 0 public PoC · 0 EPSS ≥ 0.5
113matches
0in Waratek scope0.0%
0protected0.0%
0exploited0.0%
0CISA KEV0.0%
0public PoC0.0%
0EPSS ≥ 0.50.0%
Protected by Waratek
0
0.0%
Rule in development
0
0.0%
Mitigation candidate
0
0.0%
No exploit published
0
0.0%
Outside Waratek scope
24
21.2%
Not applicable
89
78.8%
Withdrawn CVE
0
0.0%
blocked by ARMR today
0
0.0%
partly blocked
0
0.0%
not blocked
113
100.0%
not established
0
0.0%
unrecorded
0
0.0%
Exploited
0
0.0%
Working exploit published
0
0.0%
Proof of concept only
0
0.0%
Forecast only
0
0.0%
No public exploit
113
100.0%
split by
peak 35 / year
20071
Not applicable1
High1
not blocked1
No public exploit1
20080
20090
20100
20110
20120
20130
20140
20150
20160
20170
201830
Outside Waratek scope3
Not applicable27
Critical4
High7
Medium19
not blocked30
No public exploit30
20198
Not applicable8
Critical1
High1
Medium6
not blocked8
No public exploit8
20201
Not applicable1
Medium1
not blocked1
No public exploit1
202114
Outside Waratek scope1
Not applicable13
Critical2
High4
Medium8
not blocked14
No public exploit14
202235
Outside Waratek scope18
Not applicable17
Critical24
High8
Medium3
not blocked35
No public exploit35
20238
Not applicable8
Critical5
High1
Medium2
not blocked8
No public exploit8
20248
Not applicable8
Critical2
High1
Medium4
Low1
not blocked8
No public exploit8
20258
Outside Waratek scope2
Not applicable6
Critical3
Medium5
not blocked8
No public exploit8
2007200920112013201520172019202120232025
| CVE | Severity | Published▾ | Status | Exploitation | Description |
|---|---|---|---|---|---|
| CVE-2023-53975 | Critical | 2025-12-22 | Not applicable | No public exploit | Atom CMS 2.0 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries through unvalidated parameters. Attackers can inject malicious SQL code in the 'id' parameter of the admin index page to execute time-based blind SQL injection attacks. |
| CVE-2025-60837 | Medium | 2025-10-23 | Outside Waratek scope | No public exploit | A reflected cross-site scripting (XSS) vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary Javascript in the context of a user's browser via a crafted payload. |
| CVE-2025-56316 | Critical | 2025-10-17 | Outside Waratek scope | No public exploit | A SQL injection vulnerability in the content_title parameter of the /cms/content/list endpoint in MCMS 5.5.0 allows remote attackers to execute arbitrary SQL queries via unsanitized input in the FreeMarker template rendering. |
| CVE-2025-60838 | Medium | 2025-10-10 | Not applicable | No public exploit | An arbitrary file upload vulnerability in MCMS v6.0.1 allows attackers to execute arbitrary code via uploading a crafted file. |
| CVE-2025-55797 | Medium | 2025-09-30 | Not applicable | No public exploit | An improper access control vulnerability in FormCms v0.5.4 in the /api/schemas/history/[schemaId] endpoint allows unauthenticated attackers to access historical schema data if a valid schemaId is known or guessed. |
| CVE-2025-56304 | Medium | 2025-09-23 | Not applicable | No public exploit | Cross-site scripting (XSS) vulnerability in YzmCMS thru 7.3 via the referer header in the register page. |
| CVE-2025-56236 | Medium | 2025-08-28 | Not applicable | No public exploit | FormCms v0.5.5 contains a stored cross-site scripting (XSS) vulnerability in the avatar upload feature. Authenticated users can upload .html files containing malicious JavaScript, which are accessible via a public URL. When a privileged user accesses the file, the script executes in their browser context. |
| CVE-2025-25686 | Critical | 2025-03-27 | Not applicable | No public exploit | semcms <=5.0 is vulnerable to SQL Injection in SEMCMS_Fuction.php. |
| CVE-2024-53502 | Low | 2024-12-03 | Not applicable | No public exploit | Seecms v4.8 was discovered to contain a SQL injection vulnerability in the SEMCMS_SeoAndTag.php page. |
| CVE-2024-52725 | Medium | 2024-11-20 | Not applicable | No public exploit | SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component. |
| CVE-2024-46103 | Critical | 2024-09-20 | Not applicable | No public exploit | SEMCMS 4.8 is vulnerable to SQL Injection via SEMCMS_Main.php. |
| CVE-2024-36801 | Medium | 2024-06-04 | Not applicable | No public exploit | A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php. |
| CVE-2024-32409 | High | 2024-04-19 | Not applicable | No public exploit | An issue in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code via a crafted script. |
| CVE-2024-25422 | Critical | 2024-02-28 | Not applicable | No public exploit | SQL Injection vulnerability in SEMCMS v.4.8 allows a remote attacker to execute arbitrary code and obtain sensitive information via the SEMCMS_Menu.php component. |
| CVE-2024-24291 | Medium | 2024-02-06 | Not applicable | No public exploit | An issue in the component /member/index/login of yzmcms v7.0 allows attackers to direct users to malicious sites via a crafted URL. |
| CVE-2023-52274 | Medium | 2024-01-11 | Not applicable | No public exploit | member/index/register.html in YzmCMS 6.5 through 7.0 allows XSS via the Referer HTTP header. |
| CVE-2023-50563 | Critical | 2023-12-14 | Not applicable | No public exploit | Semcms v4.8 was discovered to contain a SQL injection vulnerability via the AID parameter at SEMCMS_Function.php. |
| CVE-2023-48863 | High | 2023-12-04 | Not applicable | No public exploit | SEMCMS 3.9 is vulnerable to SQL Injection. Due to the lack of security checks on the input of the application, the attacker uses the existing application to inject malicious SQL commands into the background database engine for execution, and sends some attack codes as commands or query statements to the interpreter. These malicious data can deceive the interpreter, so as to execute unplanned commands or unauthorized access to data. |
| CVE-2023-37647 | Critical | 2023-07-31 | Not applicable | No public exploit | SEMCMS v1.5 was discovered to contain a SQL injection vulnerability via the id parameter at /Ant_Suxin.php. |
| CVE-2020-18432 | Critical | 2023-06-30 | Not applicable | No public exploit | File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges. |
| CVE-2020-20502 | Medium | 2023-06-20 | Not applicable | No public exploit | Cross Site Request Forgery found in yzCMS v.2.0 allows a remote attacker to execute arbitrary code via the token check function. |
| CVE-2023-31707 | Critical | 2023-05-19 | Not applicable | No public exploit | SEMCMS 1.5 is vulnerable to SQL Injection via Ant_Rponse.php. |
| CVE-2023-30090 | Critical | 2023-05-05 | Not applicable | No public exploit | Semcms Shop v4.2 was discovered to contain an arbitrary file uplaod vulnerability via the component SEMCMS_Upfile.php. This vulnerability allows attackers to execute arbitrary code via uploading a crafted PHP file. |
| CVE-2021-36712 | Medium | 2023-02-03 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerability in yzmcms 6.1 allows attackers to steal user cookies via image clipping function. |
| CVE-2021-38733 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_BlogCat.php. |
| CVE-2021-38732 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL via Ant_Message.php. |
| CVE-2021-38731 | Critical | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to SQL Injection via Ant_Zekou.php. |
| CVE-2021-38728 | Medium | 2022-10-28 | Not applicable | No public exploit | SEMCMS SHOP v 1.1 is vulnerable to Cross Site Scripting (XSS) via Ant_M_Coup.php. |
| CVE-2022-36599 | Critical | 2022-08-16 | Outside Waratek scope | No public exploit | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/model/delete URI via models Lists. |
| CVE-2022-36272 | Critical | 2022-08-16 | Outside Waratek scope | No public exploit | Mingsoft MCMS 5.2.8 was discovered to contain a SQL injection vulnerability in /mdiy/page/verify URI via fieldName parameter. |
| CVE-2022-2726 | Critical | 2022-08-09 | Not applicable | No public exploit | A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file Ant_Check.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839. |
| CVE-2022-31943 | Critical | 2022-07-01 | Outside Waratek scope | No public exploit | MCMS v5.2.8 was discovered to contain an arbitrary file upload vulnerability. |
| CVE-2022-30506 | Critical | 2022-06-02 | Outside Waratek scope | No public exploit | An arbitrary file upload vulnerability was discovered in MCMS 5.2.7, allowing an attacker to execute arbitrary code through a crafted ZIP file. |
| CVE-2022-29647 | High | 2022-06-02 | Outside Waratek scope | No public exploit | An issue was discovered in MCMS 5.2.7. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |
| CVE-2022-30048 | Critical | 2022-05-11 | Not applicable | No public exploit | Mingsoft MCMS 5.2.7 was discovered to contain a SQL injection vulnerability in /mdiy/dict/list URI via orderBy parameter. |
| CVE-2022-27466 | Critical | 2022-05-02 | Not applicable | No public exploit | MCMS v5.2.27 was discovered to contain a SQL injection vulnerability in the orderBy parameter at /dict/list.do. |
| CVE-2022-27340 | High | 2022-04-22 | Outside Waratek scope | No public exploit | MCMS v5.2.7 contains a Cross-Site Request Forgery (CSRF) via /role/saveOrUpdateRole.do. This vulnerability allows attackers to escalate privileges and modify data. |
| CVE-2022-28036 | Critical | 2022-04-12 | Not applicable | No public exploit | AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_navigation.php |
| CVE-2022-28035 | Critical | 2022-04-12 | Not applicable | No public exploit | Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admin_ajax_blur-save.php |
| CVE-2022-28034 | Critical | 2022-04-12 | Not applicable | No public exploit | AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admin_ajax_list-sort.php |
| CVE-2022-23383 | Critical | 2022-03-10 | Not applicable | No public exploit | YzmCMS v6.3 is affected by broken access control. Without login, unauthorized access to the user's personal home page can be realized. It is necessary to judge the user's login status before accessing the personal home page, but the vulnerability can access other users' home pages through the non login status because real authentication is not carried out. |
| CVE-2021-46384 | Critical | 2022-03-04 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: RCE. The impact is: execute arbitrary code (remote). The attack vector is: ${"freemarker.template.utility.Execute"?new()("calc")}. ¶¶ MCMS has a pre-auth RCE vulnerability through which allows unauthenticated attacker with network access via http to compromise MCMS. Successful attacks of this vulnerability can result in takeover of MCMS. |
| CVE-2022-23899 | Critical | 2022-03-03 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain a SQL injection vulnerability via search.do in the file /web/MCmsAction.java. |
| CVE-2021-46063 | Critical | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain a Server Side Template Injection (SSTI) vulnerability via the Template Management module. |
| CVE-2021-46062 | High | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.5 was discovered to contain an arbitrary file deletion vulnerability via the component oldFileName. |
| CVE-2021-46037 | High | 2022-02-18 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to contain an arbitrary file deletion vulnerability via the component /template/unzip.do. |
| CVE-2021-46036 | Critical | 2022-02-18 | Outside Waratek scope | No public exploit | An arbitrary file upload vulnerability in the component /ms/file/uploadTemplate.do of MCMS v5.2.4 allows attackers to execute arbitrary code. |
| CVE-2022-23384 | High | 2022-02-15 | Not applicable | No public exploit | YzmCMS v6.3 is affected by Cross Site Request Forgery (CSRF) in /admin.add |
| CVE-2022-23889 | Medium | 2022-01-28 | Not applicable | No public exploit | The comment function in YzmCMS v6.3 was discovered as being able to be operated concurrently, allowing attackers to create an unusually large number of comments. |
| CVE-2022-23888 | High | 2022-01-28 | Not applicable | No public exploit | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgey (CSRF) via the component /yzmcms/comment/index/init.html. |
| CVE-2022-23887 | Medium | 2022-01-28 | Not applicable | No public exploit | YzmCMS v6.3 was discovered to contain a Cross-Site Request Forgery (CSRF) which allows attackers to arbitrarily delete user accounts via /admin/admin_manage/delete. |
| CVE-2021-46386 | Critical | 2022-01-26 | Outside Waratek scope | No public exploit | File upload vulnerability in mingSoft MCMS through 5.2.5, allows remote attackers to execute arbitrary code via a crafted jspx webshell to net.mingsoft.basic.action.web.FileAction#upload. |
| CVE-2021-46385 | High | 2022-01-26 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.FormDataAction#queryData. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database. |
| CVE-2021-46383 | High | 2022-01-26 | Outside Waratek scope | No public exploit | https://gitee.com/mingSoft/MCMS MCMS <=5.2.5 is affected by: SQL Injection. The impact is: obtain sensitive information (remote). The component is: net.mingsoft.mdiy.action.web.DictAction#list. The attack vector is: 0 or sleep(3). ¶¶ MCMS has a sql injection vulnerability through which attacker can get sensitive information from the database. |
| CVE-2022-23315 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to contain an arbitrary file upload vulnerability via the component /ms/template/writeFileContent.do. |
| CVE-2022-23314 | Critical | 2022-01-21 | Not applicable | No public exploit | MCMS v5.2.4 was discovered to contain a SQL injection vulnerability via /ms/mdiy/model/importJson.do. |
| CVE-2022-22930 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | A remote code execution (RCE) vulnerability in the Template Management function of MCMS v5.2.4 allows attackers to execute arbitrary code via a crafted payload. |
| CVE-2022-22929 | Critical | 2022-01-21 | Outside Waratek scope | No public exploit | MCMS v5.2.4 was discovered to have an arbitrary file upload vulnerability in the New Template module, which allows attackers to execute arbitrary code via a crafted ZIP file. |
| CVE-2022-22928 | Critical | 2022-01-21 | Not applicable | No public exploit | MCMS v5.2.4 was discovered to have a hardcoded shiro-key, allowing attackers to exploit the key and execute arbitrary code. |
| CVE-2020-18081 | High | 2021-12-17 | Not applicable | No public exploit | The checkuser function of SEMCMS 3.8 was discovered to contain a vulnerability which allows attackers to obtain the password in plaintext through a SQL query. |
| CVE-2020-18078 | Critical | 2021-12-17 | Not applicable | No public exploit | A vulnerability in /include/web_check.php of SEMCMS v3.8 allows attackers to reset the Administrator account's password. |
| CVE-2020-19951 | High | 2021-09-23 | Not applicable | No public exploit | A cross-site request forgery (CSRF) in /controller/pay.class.php of YzmCMS v5.5 allows attackers to access sensitive components of the application. |
| CVE-2020-19950 | Medium | 2021-09-23 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the /banner/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. |
| CVE-2020-19949 | Medium | 2021-09-23 | Not applicable | No public exploit | A cross-site scripting (XSS) vulnerability in the /link/add.html component of YzmCMS v5.3 allows attackers to execute arbitrary web scripts or HTML. |
| CVE-2020-20341 | High | 2021-09-01 | Not applicable | No public exploit | YzmCMS v5.5 contains a server-side request forgery (SSRF) in the grab_image() function. |
| CVE-2020-19118 | Medium | 2021-07-30 | Not applicable | No public exploit | Cross Site Scripting (XSS) vulnerabiity in YzmCMS 5.2 via the site_code parameter in admin/index/init.html. |
| CVE-2020-35972 | Medium | 2021-06-03 | Not applicable | No public exploit | An issue was discovered in YzmCMS V5.8. There is a CSRF vulnerability that can add member user accounts via member/member/add.html. |
| CVE-2020-35971 | Medium | 2021-06-03 | Not applicable | No public exploit | A storage XSS vulnerability is found in YzmCMS v5.8, which can be used by attackers to inject JS code and attack malicious XSS on the /admin/system_manage/user_config_edit.html page. |
| CVE-2020-35970 | High | 2021-06-03 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.8. There is a SSRF vulnerability in the background collection management that allows arbitrary file read. |
| CVE-2020-23370 | Medium | 2021-05-10 | Not applicable | No public exploit | In YzmCMS 5.6, stored XSS exists via the common/static/plugin/ueditor/1.4.3.3/php/controller.php action parameter, which allows remote attackers to upload a swf file. The swf file can be injected with arbitrary web script or HTML. |
| CVE-2020-23369 | Medium | 2021-05-10 | Not applicable | No public exploit | In YzmCMS 5.6, XSS was discovered in member/member_content/init.html via the SRC attribute of an IFRAME element because of using UEditor 1.4.3.3. |
| CVE-2020-18084 | Medium | 2021-04-30 | Not applicable | No public exploit | Cross Site Scripting (XSS) in yzmCMS v5.2 allows remote attackers to execute arbitrary code by injecting commands into the "referer" field of a POST request to the component "/member/index/login.html" when logging in. |
| CVE-2020-23262 | Critical | 2021-01-26 | Outside Waratek scope | No public exploit | An issue was discovered in ming-soft MCMS v5.0, where a malicious user can exploit SQL injection without logging in through /mcms/view.do. |
| CVE-2020-22394 | Medium | 2020-11-19 | Not applicable | No public exploit | In YzmCMS v5.5 the member contribution function in the editor contains a cross-site scripting (XSS) vulnerability. |
| CVE-2019-16532 | Medium | 2019-09-26 | Not applicable | No public exploit | An HTTP Host header injection vulnerability exists in YzmCMS V5.3. A malicious user can poison a web cache or trigger redirections. |
| CVE-2019-16678 | Medium | 2019-09-21 | Not applicable | No public exploit | admin/urlrule/add.html in YzmCMS 5.3 allows CSRF with a resultant denial of service by adding a superseding route. |
| CVE-2019-1010151 | Critical | 2019-07-19 | Not applicable | No public exploit | zzcms zzmcms 8.3 and earlier is affected by: File Delete to getshell. The impact is: getshell. The component is: /user/ppsave.php. |
| CVE-2018-16247 | Medium | 2019-06-20 | Not applicable | No public exploit | YzmCMS 5.1 has XSS via the admin/system_manage/user_config_add.html title parameter. |
| CVE-2019-11518 | High | 2019-04-25 | Not applicable | No public exploit | An issue was discovered in SEMCMS 3.8. SEMCMS_Inquiry.php allows AID[] SQL Injection because the class.phpmailer.php inject_check_sql protection mechanism is incomplete. |
| CVE-2019-9661 | Medium | 2019-03-11 | Not applicable | No public exploit | Stored XSS exists in YzmCMS 5.2 via the admin/system_manage/user_config_edit.html "value" parameter, |
| CVE-2019-9660 | Medium | 2019-03-11 | Not applicable | No public exploit | Stored XSS exists in YzmCMS 5.2 via the admin/category/edit.html "catname" parameter. |
| CVE-2019-9570 | Medium | 2019-03-05 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.2.0. It has XSS via the bottom text field to the admin/system_manage/save.html URI, related to the site_code parameter. |
| CVE-2018-20017 | Medium | 2018-12-10 | Not applicable | No public exploit | SEMCMS 3.5 has XSS via the first text box to the SEMCMS_Main.php URI. |
| CVE-2018-20015 | High | 2018-12-10 | Not applicable | No public exploit | YzmCMS v5.2 has admin/role/add.html CSRF. |
| CVE-2018-19849 | Medium | 2018-12-04 | Not applicable | No public exploit | An issue was discovered in YzmCMS 5.2. XSS exists via the admin/content/search.html searinfo parameter. |
| CVE-2018-19092 | Medium | 2018-11-07 | Not applicable | No public exploit | An issue was discovered in YzmCMS v5.2. It has XSS via a search/index/archives/pubtime/ query string, as demonstrated by the search/index/archives/pubtime/1526387722/page/1.html URI. NOTE: this does not obtain a user's cookie. |
| CVE-2018-18841 | Medium | 2018-10-30 | Not applicable | No public exploit | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexkey parameter. |
| CVE-2018-18840 | Medium | 2018-10-30 | Not applicable | No public exploit | XSS was discovered in SEMCMS PHP V3.4 via the SEMCMS_SeoAndTag.php?Class=edit&CF=SeoAndTag tag_indexmetatit parameter. |
| CVE-2018-18831 | High | 2018-10-30 | Outside Waratek scope | No public exploit | An issue was discovered in com\mingsoft\cms\action\GeneraterAction.java in MCMS 4.6.5. An attacker can write a .jsp file (in the position parameter) to an arbitrary directory via a ../ Directory Traversal in the url parameter. |
| CVE-2018-18830 | Critical | 2018-10-30 | Outside Waratek scope | No public exploit | An issue was discovered in com\mingsoft\basic\action\web\FileAction.java in MCMS 4.6.5. Since the upload interface does not verify the user login status, you can use this interface to upload files without setting a cookie. First, start an upload of JSP code with a .png filename, and then intercept the data packet. In the name parameter, change the suffix to jsp. In the response, the server returns the storage path of the file, which can be accessed to execute arbitrary JSP code. |
| CVE-2018-18783 | Medium | 2018-10-29 | Not applicable | No public exploit | XSS was discovered in SEMCMS V3.4 via the semcms_remail.php?type=ok umail parameter. |
| CVE-2018-18745 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Menu.php?lgid=1 during editing. |
| CVE-2018-18744 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the fifth text box to the admin/SEMCMS_Main.php URI. |
| CVE-2018-18743 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the second text field to the admin/SEMCMS_Categories.php?pid=1&lgid=1 URI. |
| CVE-2018-18742 | High | 2018-10-29 | Not applicable | No public exploit | A CSRF issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_User.php?Class=add&CF=user URI. |
| CVE-2018-18741 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via admin/SEMCMS_Download.php?lgid=1 during editing. |
| CVE-2018-18740 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the first input field to the admin/SEMCMS_Link.php?lgid=1 URI. |
| CVE-2018-18739 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Products.php?lgid=1 Keywords field. |
| CVE-2018-18738 | Medium | 2018-10-29 | Not applicable | No public exploit | An XSS issue was discovered in SEMCMS 3.4 via the admin/SEMCMS_Categories.php?pid=1&lgid=1 category_key parameter. |
| CVE-2018-17366 | High | 2018-09-23 | Outside Waratek scope | No public exploit | An issue was discovered in MCMS 4.6.5. There is a CSRF vulnerability that can add an administrator account via ms/basic/manager/save.do. |