CVE-2025-15002

SeaCMS up to version 13.3 contains a SQL injection flaw in an unknown function of js/player/dmplayer/dmku/class/mysqli.class.php, triggered by manipulating the page/limit argument. The vulnerability can be exploited remotely and exploits have been disclosed publicly. Public sources consistently r...