CVE-2024-52725

Summary

CVE-2024-52725 is a newly disclosed SQL injection vulnerability affecting SemCms version 4.8. An attacker can exploit this flaw by manipulating the ldgid parameter in the SEMCMS_SeoAndTag.php component, enabling them to execute arbitrary code and potentially gain unauthorized access to sensitive data. This vulnerability poses a serious threat to organizations using the SemCms platform and underscores the importance of keeping software up-to-date to protect against such cybersecurity threats.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.