1338 matches found
Cross site scripting
SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...
CVE-2018-16343
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...
Design/Logic Flaw
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...
CVE-2018-16343
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...
CVE-2018-16348
SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...
CVE-2018-16348
SeaCMS v6.61 suffers a cross-site scripting (XSS) vulnerability in admin_video.php via the v_content parameter related to the site name. According to CNVD-2018-19071, remote attackers can exploit this to inject arbitrary web script or HTML. There is no remediation or patch information provided in...
CVE-2018-16343
SeaCMS 6.61 contains a remote code execution flaw: the parseIf() function in include/main.class.php fails to block use of $GLOBALS, enabling attackers to run arbitrary code. This has been documented across multiple sources (CNVD-2018-19075 and NVD/NVD-derived entries) and is tied to SeaCMS’s PHP ...
CVE-2018-16348: Improper Neutralization of Input During Web Page Generation
SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...
CVE-2018-16343: Improper Control of Generation of Code
SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...
Arbitrary File Deletion Vulnerability in seacms v6.61
seacms is a free and open source web content management system written in PHP. The system is mainly used to manage video-on-demand resources. seacms v6.61 version of the arbitrary file deletion vulnerability , an attacker can use the vulnerability to arbitrarily delete files...
SQL Injection Vulnerability in seacms
seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...
SeaCMS Remote Code Execution Vulnerability (CNVD-2019-08329)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A remote code execution vulnerability exists in SeaCMS version 6.61, which can be exploited by remote attackers to execute code by writing PHP...
CVE-2018-14910
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...
Cross site request forgery (csrf)
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...
CVE-2018-14910
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...
CVE-2018-14910
SeaCMS v6.61 is vulnerable to Remote Code Execution. An attacker can place PHP code via an allowed IP address (ip) that targets /admin/admin_ip.php (also reachable as /adm1n/admin_ip.php). The payload is executed when an affected endpoint is accessed (adm1n/admin_ip.php or data/admin/ip.php), ena...
CVE-2018-14910
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...
CVE-2018-14910: Improper Control of Generation of Code
SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...
Code Execution Vulnerability in the background of seacms website builder system
seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms website builder system, which can be exploited by attackers to execute remote code...