CVE-2025-51659: SQL Injection
Published Jul 14, 2025
·Updated
SemCms v5.0 was discovered to contain a SQL injection vulnerability via the ID parameter at SEMCMSProducts.php.
Affected Software
2 affected components
SEMCMS SEMCMS
Sem-cms Semcms<=5.0
Event History
Jul 14, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·05:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2025-51659?
CVE-2025-51659 is classified as a high-severity SQL injection vulnerability.
2
How do I fix CVE-2025-51659?
To fix CVE-2025-51659, you should validate and sanitize user input for the ID parameter in SEMCMS_Products.php.
3
What software versions are affected by CVE-2025-51659?
CVE-2025-51659 affects SemCms versions up to and including 5.0.
4
Can CVE-2025-51659 lead to data loss?
Yes, CVE-2025-51659 can potentially allow an attacker to execute arbitrary SQL queries, which may lead to data loss.
5
What type of attack can be executed using CVE-2025-51659?
CVE-2025-51659 allows attackers to perform SQL injection attacks through the ID parameter.