9.1CVSS
7AI Score
0.0005EPSS
SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component...
8.8CVSS
9AI Score
0.002EPSS
A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
5.3AI Score
0.001EPSS
An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php...
9.8CVSS
9.6AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php...
8.1CVSS
8.3AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php...
8.8CVSS
8.8AI Score
0.001EPSS
An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php...
7.2CVSS
7.3AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
9.5AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
9.5AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
9.5AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
9.5AI Score
0.001EPSS
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component...
9.8CVSS
9.5AI Score
0.001EPSS
SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php...
9.8CVSS
9.4AI Score
0.001EPSS
A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin...
8.8CVSS
8.7AI Score
0.001EPSS
A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
5.2AI Score
0.001EPSS
A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted...
5.4CVSS
5.2AI Score
0.001EPSS
A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit...
6.5CVSS
6.5AI Score
0.001EPSS
A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...
9.8CVSS
9.4AI Score
0.001EPSS
Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_...
7.2CVSS
7.5AI Score
0.003EPSS
An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals...
9.8CVSS
9.6AI Score
0.004EPSS
SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component...
9.8CVSS
9.7AI Score
0.002EPSS
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/admin_ping.php, which interacts with...
7.2CVSS
7.1AI Score
0.003EPSS
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via...
8.8CVSS
8.6AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via...
8.8CVSS
8.6AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset...
6.1CVSS
5.9AI Score
0.001EPSS
6.1CVSS
5.9AI Score
0.001EPSS
Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server...
7.2CVSS
7.2AI Score
0.003EPSS
Seacms v11.6 was discovered to contain a remote code execution (RCE) vulnerability via the component...
9.8CVSS
9.9AI Score
0.006EPSS
9.8CVSS
9.7AI Score
0.003EPSS
SQL Injection in SEACMS v210530 (2021-05-30) allows remote attackers to execute arbitrary code via the component...
9.8CVSS
9.9AI Score
0.002EPSS
Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in...
6.1CVSS
6AI Score
0.001EPSS
Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin...
6.5CVSS
6.5AI Score
0.001EPSS
A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or...
6.1CVSS
5.9AI Score
0.001EPSS
SQL injection vulnerability in SeaCMS 10.1 (2020.02.08) via the id parameter in an edit action to...
9.8CVSS
9.7AI Score
0.002EPSS
8.8CVSS
8.6AI Score
0.001EPSS
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT...
5.4CVSS
5.3AI Score
0.001EPSS
In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in...
7.2CVSS
7.4AI Score
0.001EPSS
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir...
7.5CVSS
7.6AI Score
0.004EPSS
9.8CVSS
9.8AI Score
0.002EPSS
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../...
5.3CVSS
5.4AI Score
0.001EPSS
An issue was discovered in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd...
6.1CVSS
5.9AI Score
0.001EPSS
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php...
9.8CVSS
9.8AI Score
0.002EPSS
An issue was discovered in SeaCMS 6.61. adm1n/admin_reslib.php has SSRF via the url...
9.1CVSS
9.1AI Score
0.004EPSS
An issue was discovered in SeaCMS through 6.61. adm1n/admin_database.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting...
7.5CVSS
7.5AI Score
0.002EPSS
SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site...
4.8CVSS
4.8AI Score
0.001EPSS
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of...
7.2CVSS
7.4AI Score
0.011EPSS
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php). The code is executed by visiting adm1n/admin_ip.php or data/admin/ip.php. This can also be exploited through...
8.8CVSS
8.9AI Score
0.003EPSS
6.1CVSS
6AI Score
0.001EPSS
SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.php). The code is executed by visiting /details/index.php. This can also be exploited through...
8.8CVSS
8.8AI Score
0.001EPSS
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management...
4.8CVSS
4.9AI Score
0.001EPSS