CVE-2024-52725

MediumCVSS 4.9

Published: 20/11/2024(UTC)Updated: 05/07/2026(UTC)Translated: 06/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.54%

42th percentile - higher than 42% of all known CVEs

Summary

A SQL injection vulnerability was discovered in SemCms v4.8 in the SEMCMS_SeoAndTag.php component. An attacker can exploit the ldgid parameter to execute arbitrary SQL code.

Risk Assessment

The risk includes unauthorized database access, data theft, or data modification, potentially leading to full system compromise.

Recommendation

Immediately update SemCms to the latest patched version and implement parameterized SQL queries in the source code.

Original NVD description (English source)

SemCms v4.8 was discovered to contain a SQL injection vulnerability. This allows an attacker to execute arbitrary code via the ldgid parameter in the SEMCMS_SeoAndTag.php component.