Security Advisory
CVE-2024-28405
7.2
HIGH
Vulnerability Description
SEMCMS 4.8 is vulnerable to Incorrect Access Control. The code installs SEMCMS_Funtion.php before checking if the admin is a valid user in the admin page because authentication function is called from there, users gain admin privileges.
Published Date
March 29, 2024
Official Source
NIST NVD Advisory