CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

creationtimestamp| type| source ---|---|--- 2024-11-08 21:08:39+00:00| seen| https://infosec.exchange/users/cve/statuses/113449377391121331 2024-11-08 23:03:42+00:00| seen| https://t.me/cvedetector/10222...

CVE-2024-50808

SeaCms version 13.1 is vulnerable to code injection within the notification module of the member message notification module in the backend user module. The root cause is the unsafe handling of the "notify" variable in the admin_notify.php file. This vulnerability could allow an attacker to injec...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...