1338 matches found
CVE-2018-19349: Improper Neutralization of Special Elements used in an SQL Command
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
SeaCMS Arbitrary File Deletion Vulnerability (CNVD-2018-20079)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 6.64. A remote attacker can exploit the vulnerability to delete arbitrary files with the hel...
CVE-2018-17365
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
CVE-2018-17365
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
Code injection
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
CVE-2018-17365
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
CVE-2018-17365
SeaCMS versions 6.64 and 7.2 expose an ARBITRARY FILE DELETION vulnerability exploitable via the filedir parameter. The root cause is improper handling of the filedir input, allowing remote attackers to delete files on the server. Impact is exposure of file deletion capability (integrity/availabi...
SeaCMS Path Traversal Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A path traversal vulnerability exists in SeaCMS version 6.64, which can be exploited by an attacker by sending...
CVE-2018-17365: Improper Limitation of a Pathname to a Restricted Directory
SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...
SeaCMS cross-site scripting vulnerability (CNVD-2018-20093)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the admindatarelate.php file in SeaCMS version 6.64. A remote attacker can exploit this...
CVE-2018-17321
An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...
CVE-2018-17321
An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...
Design/Logic Flaw
An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...
CVE-2018-17321
An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...
CVE-2018-17321
SeaCMS 6.64 is affected by a cross-site scripting (XSS) vulnerability in admin_datarelate.php, exploitable via the time or maxHit parameter in a dorandomset action. The issue stems from input handling in that action, enabling an attacker to inject arbitrary web script or HTML. Affected component:...
CVE-2018-17321: Improper Neutralization of Input During Web Page Generation
An issue was discovered in SeaCMS 6.64. XSS exists in admindatarelate.php via the time or maxHit parameter in a dorandomset action...
CVE-2018-16822
SeaCMS 6.64 allows SQL Injection via the upload/admin/adminvideo.php order parameter...
CVE-2018-16822
SeaCMS 6.64 allows SQL Injection via the upload/admin/adminvideo.php order parameter...