SEMCMS SQL Injection Vulnerability in Image Library Management Component

A critical SQL injection vulnerability has been identified in SEMCMS versions through 4.8. The issue arises from an unknown functionality in the file SEMCMS_Images.php, specifically within the Image Library Management Page component. This vulnerability can be exploited remotely, allowing attackers to manipulate SQL queries and potentially access or modify database information.

Impact

Exploitation of this vulnerability allows for SQL injection, which could be used to manipulate database queries, potentially leading to unauthorized data access or modification.