Lucene search

CVE-2021-39426

🗓️ 15 Dec 2022 19:15:15Reported by mitreType

cve🔗 web.nvd.nist.gov👁 30 Views🌐 WEB

Seacms 11.4 admin_notify.php allows arbitrary php code execution via notify1 parameter

Reporter	Title	Published	Views	Family All 3
Cvelist	CVE-2021-39426	15 Dec 202200:00	–	cvelist
Prion	Code injection	15 Dec 202219:15	–	prion
NVD	CVE-2021-39426	15 Dec 202219:15	–	nvd

Nvd

Node

seacms seacmsMatch11.4

Source	Link
github	www.github.com/seacms-com/seacms/issues/21

Parameter	Position	Path	Description	CWE
notify1	query param	/Upload/admin/admin_notify.php	Arbitrary PHP code execution via the notify1 parameter.	CWE-94

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

15 Dec 2022 19:15Current

9.6High risk

Vulners AI Score9.6

CVSS39.8

EPSS0.00435

CWE-94