What’s Vulnerable › Vulnerabilities

CVE-2020-18432

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-06-30 · updated 2026-06-17
• Weakness: CWE-434

Description

File Upload vulnerability in SEMCMS PHP 3.7 allows remote attackers to upload arbitrary files and gain escalated privileges.

Affected products

• SEMCMS: 3.7

References

• https://vorders.me/2019/03/05/semcms-vulnerablity-before-php-v3-7/#admin-upload-webshell-in-SEMCMS-Upfile-php
• https://github.com/advisories/GHSA-hg72-f8x2-chjh
• https://vorders.me/2019/03/05/semcms-vulnerablity-before-php-v3-7/#admin-upload-webshell-in-SEMCMS-Upfile-php

Get alerted when CVE-2020-18432 or the next vulnerability affects your stack