SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component...
8.8CVSS
8.8AI Score
0.002EPSS
A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
6.1AI Score
0.001EPSS
An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php...
9.8CVSS
8.2AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php...
8.8CVSS
8.2AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php...
8.1CVSS
8.2AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php...
7.2CVSS
8.2AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
7.4AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
7.4AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
7.4AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
7.4AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
7.4AI Score
0.001EPSS
SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php...
9.8CVSS
7.2AI Score
0.001EPSS
A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin...
8.8CVSS
6.9AI Score
0.001EPSS
A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
5.2AI Score
0.0004EPSS
A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
5.2AI Score
0.0004EPSS
A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit...
6.5CVSS
6.5AI Score
0.001EPSS
A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...
9.8CVSS
9.4AI Score
0.001EPSS
Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_...
7.2CVSS
7.4AI Score
0.003EPSS
An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals...
9.8CVSS
9.6AI Score
0.004EPSS
SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component...
9.8CVSS
9.8AI Score
0.002EPSS
Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server...
7.2CVSS
7.1AI Score
0.003EPSS
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component...
9.8CVSS
9.8AI Score
0.006EPSS
9.8CVSS
9.7AI Score
0.003EPSS
SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component...
9.8CVSS
9.9AI Score
0.002EPSS
Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in...
6.1CVSS
6AI Score
0.001EPSS
Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin...
6.5CVSS
7.5AI Score
0.001EPSS
A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or...
6.1CVSS
6AI Score
0.001EPSS
SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to...
9.8CVSS
8.5AI Score
0.002EPSS
8.8CVSS
7.4AI Score
0.001EPSS
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT...
5.4CVSS
6.1AI Score
0.001EPSS
In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in...
7.2CVSS
8.6AI Score
0.001EPSS
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir...
7.5CVSS
7.7AI Score
0.004EPSS
An issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset...
6.1CVSS
6.4AI Score
0.001EPSS
9.8CVSS
8.8AI Score
0.002EPSS
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../...
5.3CVSS
7.5AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd...
6.1CVSS
6.4AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url...
9.1CVSS
7.4AI Score
0.004EPSS
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php...
9.8CVSS
8.6AI Score
0.002EPSS
An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting...
7.5CVSS
7.6AI Score
0.002EPSS
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of...
7.2CVSS
8.5AI Score
0.011EPSS
SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site...
4.8CVSS
6.1AI Score
0.001EPSS
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php). The code is executed by visiting adm1n/admin_ip.php or data/admin/ip.php. This can also be exploited through...
8.8CVSS
8AI Score
0.003EPSS
6.1CVSS
6.5AI Score
0.001EPSS
SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.php). The code is executed by visiting /details/index.php. This can also be exploited through...
8.8CVSS
8AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via...
8.8CVSS
7.4AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via...
8.8CVSS
7.4AI Score
0.001EPSS
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management...
4.8CVSS
6.1AI Score
0.001EPSS
6.1CVSS
6.2AI Score
0.001EPSS
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with...
7.2CVSS
7.9AI Score
0.003EPSS