CVE-2022-2726: SEMCMS Ant_Check.php sql injection

Published Aug 9, 2022

Updated

A vulnerability classified as critical has been found in SEMCMS. This affects an unknown part of the file AntCheck.php. The manipulation of the argument DID leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205839.

Affected Software

1 affected component

Sem-cms Semcms

Event History

Aug 9, 2022

CVE Published

via MITRE·07:11 AM

Data Sourced

via MITRE·07:11 AM

DescriptionSeverityWeakness

Frequently Asked Questions

What is the vulnerability ID for this SEMCMS vulnerability?

The vulnerability ID for this SEMCMS vulnerability is CVE-2022-2726.

What is the severity of CVE-2022-2726?

The severity of CVE-2022-2726 is critical.

What part of the file Ant_Check.php is affected by CVE-2022-2726?

CVE-2022-2726 affects an unknown part of the file Ant_Check.php.

What is the attack method for CVE-2022-2726?

The attack method for CVE-2022-2726 is SQL injection.

Is remote exploitation possible for CVE-2022-2726?

Yes, remote exploitation is possible for CVE-2022-2726.

Are there any known exploits for CVE-2022-2726?

Yes, there are known exploits for CVE-2022-2726.

How can I fix CVE-2022-2726 in SEMCMS?

To fix CVE-2022-2726 in SEMCMS, apply the latest security patch or update provided by the vendor.