CVE-2025-51652: SQL Injection
Published Jul 14, 2025
·Updated
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the pid parameter at SEMCMSCategories.php.
Affected Software
2 affected components
SEMCMS SEMCMS
Sem-cms Semcms<=5.0
Event History
Jul 14, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-51652?
CVE-2025-51652 has been classified with a high severity due to its potential for exploitation through SQL injection.
2
How do I fix CVE-2025-51652?
To fix CVE-2025-51652, you should validate and sanitize all input parameters, particularly the pid parameter in the SEMCMS_Categories.php file.
3
Which versions of SemCms are affected by CVE-2025-51652?
CVE-2025-51652 affects SemCms versions up to and including 5.0.
4
What type of vulnerability is CVE-2025-51652?
CVE-2025-51652 is a SQL injection vulnerability that allows attackers to execute arbitrary SQL queries.
5
Can CVE-2025-51652 lead to data leakage?
Yes, if exploited, CVE-2025-51652 may lead to unauthorized access to sensitive data in the database.