1342 matches found
CVE-2018-13445
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
CVE-2018-13444
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
Cross site request forgery (csrf)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
CVE-2018-13444
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
Cross site request forgery (csrf)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
CVE-2018-13445
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
CVE-2018-13444
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
CVE-2018-13444
CVE-2018-13444 affects SeaCMS 6.61. The issue is a cross-site request forgery (CSRF) that can add an administrator account via the URL adm1n/admin_manager.php?action=save&id=2. The connected documents confirm the vulnerability exists in SeaCMS 6.61 and describe the admin-adding vector, but there ...
CVE-2018-13445
SeaCMS 6.61 is affected by a CSRF vulnerability that allows an attacker to add a user account via adm1n/admin_manager.php?action=add. The root cause is CSRF in the admin interface; impact indicates high severity (NVD CVSS3: 8.8) with network origin, no authentication, and high confidentiality, in...
CVE-2018-13445: Cross-Site Request Forgery (CSRF)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
CVE-2018-13444: Cross-Site Request Forgery (CSRF)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
SeaCMS Cross-Site Scripting Vulnerability (CNVD-2018-14550)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability by sending the 'site name...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
Cross site scripting
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 is vulnerable to Cross‑Site Scripting via the site name parameter on adm1n/admin_config.php (system management page). The root cause is an XSS flaw in the site name input; impact is user‑visible script injection. The connected records confirm the vulnerability across multiple sources...
CVE-2018-12431: Improper Neutralization of Input During Web Page Generation
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
SQL Injection Vulnerability in Ocean CMS
Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. Ocean CMS is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...