| Package | Affected versions | Patched versions |
|---|---|---|
| semcms | = 4.8 |
SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free