| Title | semcms semcmsPHP(多语)版 V5.0 Unauthorized access vulnerability |
|---|
| Description | SEMCMS is an open-source content management system (CMS) designed specifically for foreign trade. An unauthorized arbitrary user deletion vulnerability exists in the system, which allows attackers to delete any user. This can lead to the loss of system users and data, posing a serious threat to system data integrity，Unauthorized user deletion can prevent legitimate users from logging in, causing business disruption. Irreversible user data loss impacts enterprise operations. It may also be exploited for bulk deletion or ransomware attacks, severely compromising system integrity and corporate reputation. |
|---|
| Source | ⚠️ https://github.com/ants01/semcmsPHP-V5.0-There-is-an-unauthorized-deletion-of-arbitrary-users. |
|---|
| User | qq150180 (UID 101053) |
|---|
| Submission | 09/08/2026 05:45 (1 month ago) |
|---|
| Moderation | 10/11/2026 12:18 (1 month later) |
|---|
| Status | Accepted |
|---|
| VulDB entry | 416589 [SEMCMS up to 5.0 SEMCMS_User.php?Class=Deleted&CF=user improper authorization] |
|---|
| Points | 20 |
|---|