1338 matches found
CVE-2018-16445
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
Directory traversal
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
CVE-2018-16444
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
Server side request forgery (ssrf)
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16444
CVE-2018-16444 affects SeaCMS 6.61 (and earlier noted in related CNVD/CVE records) with a server-side request forgery (SSRF) in the admin_reslib.php file accessed via the url parameter. The vulnerability allows an attacker, via crafted input, to induce SSRF without authentication, aligning with a...
CVE-2018-16446
CVE-2018-16446 affects SeaCMS
CVE-2018-16445
SeaCMS ≤6.61 is affected by an SQL injection in adm1n/admin_topic_vod.php via the tid parameter. The root cause is an unsafely interpolated tid input leading to query manipulation, enabling unauthorized data access or modification. Affected product/line: SeaCMS (Ocean CMS). The CVSS metrics indic...
CVE-2018-16446
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
CVE-2018-16444
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16445
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
SeaCMS Arbitrary File Deletion Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in the file adm1n/admindatabase.php in SeaCMS 6.61 and earlier versions. The vulnerability can be exploited to...
SeaCMS Code Execution Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in SeaCMS version 6.61, which originates from the 'parseIf' function in the include/main.class.php file...
CVE-2018-16446: Improper Limitation of a Pathname to a Restricted Directory
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
SeaCMS Server-Side Request Forgery Vulnerability
SeaCMS Ocean CMS is a professional open source free PHP film and television system. There is a server-side request forgery vulnerability in adm1n/adminreslib.php in 6.61 and earlier versions of SeaCMS, which can be exploited by an attacker through the url parameter to conduct a server-side reques...
CVE-2018-16445: Improper Neutralization of Special Elements used in an SQL Command
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
CVE-2018-16444: Server-Side Request Forgery (SSRF)
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
SeaCMS SQL Injection Vulnerability (CNVD-2019-08332)
SeaCMS Ocean CMS is a professional open source free PHP film and television system. 6.61 and earlier versions of SeaCMS SQL injection vulnerability, attackers can through the adm1n/admintopicvod.php request in the tid parameter to take advantage of the vulnerability for SQL injection attacks...
SeaCMS cross-site scripting vulnerability (CNVD-2018-19071)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.61, which can be exploited by remote attackers to...
