Reflected Cross-site Scripting Vulnerability in Ocean CMS V6.54 Backend Login Jump Page

Ocean Movie Management System seacms, Ocean CMS is a video-on-demand system designed for webmasters with different needs. Ocean CMS V6.54 backend login jump page reflects cross-site scripting vulnerability. An attacker can exploit this vulnerability by constructing XSS statements, performing pop-...

CSRF Vulnerability in Ocean CMS V6.48

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. There is a CSRF vulnerability in the back-end SQL execution form of Ocean CMS, which can be exploited by attackers to trick administrators into clicking on malicious links to execute SQL statements and write webshell to gain server...

Ocean CMS V6.48 File Traversal and Arbitrary File Deletion Vulnerabilities

Ocean Movie System aka Ocean CMS seacms is a PHP movie system. Ocean CMS version 6.48 \admin\admintemplate.php page file traversal and arbitrary file deletion vulnerability, allowing attackers to exploit the vulnerability to obtain, delete arbitrary files, can lead to system reinstallation...