Security Advisory

CVE-2024-36801

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2024-06-04 12:47:24

Last updated 2025-02-13 15:59:43

Assigner mitre

State PUBLISHED

A SQL injection vulnerability in SEMCMS v.4.8, allows a remote attacker to obtain sensitive information via the lgid parameter in Download.php.