CVE-2018-16343: Improper Control of Generation of Code

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

CVE-2018-16348: Improper Neutralization of Input During Web Page Generation

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

PT-2018-13508

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to a problem where an attacker can execute arbitrary code via the v content parameter in the admin video.php file, which is linked to the site name. Recommendations For SeaCMS version 6.61,...

PT-2018-13503

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue allows remote attackers to execute arbitrary code. This is due to the parseIf function in include/main.class.php not blocking the use of $GLOBALS. Recommendations For SeaCMS version 6.61, consider...

Arbitrary File Deletion Vulnerability in seacms v6.61

seacms is a free and open source web content management system written in PHP. The system is mainly used to manage video-on-demand resources. seacms v6.61 version of the arbitrary file deletion vulnerability , an attacker can use the vulnerability to arbitrarily delete files...

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

SeaCMS Remote Code Execution Vulnerability (CNVD-2019-08329)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A remote code execution vulnerability exists in SeaCMS version 6.61, which can be exploited by remote attackers to execute code by writing PHP...

CVE-2018-14910

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

Cross site request forgery (csrf)

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

CVE-2018-14910

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

CVE-2018-14910

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

CVE-2018-14910

SeaCMS v6.61 is vulnerable to Remote Code Execution. An attacker can place PHP code via an allowed IP address (ip) that targets /admin/admin_ip.php (also reachable as /adm1n/admin_ip.php). The payload is executed when an affected endpoint is accessed (adm1n/admin_ip.php or data/admin/ip.php), ena...

CVE-2018-14910: Improper Control of Generation of Code

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

PT-2018-12794

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue allows for remote code execution by inserting PHP code into an allowed IP address, which is then executed when visiting specific endpoints, such as /admin/admin ip.php or /adm1n/admin ip.php, and also...

Code Execution Vulnerability in the background of seacms website builder system

seacms is a video-on-demand system based on PHP+MySql technology. There is a code execution vulnerability in the backend of seacms website builder system, which can be exploited by attackers to execute remote code...

Design/Logic Flaw

SeaCMS 6.61 has two XSS issues in the adminconfig.php file via certain form fields...

CVE-2018-14517

SeaCMS 6.61 has two XSS issues in the adminconfig.php file via certain form fields...

CVE-2018-14517

SeaCMS 6.61 has two XSS issues in the adminconfig.php file via certain form fields...

CVE-2018-14517

SeaCMS 6.61 contains two reflected XSS flaws in admin_config.php form fields. Reports (NVD, CNVD) describe remote exploitation leading to arbitrary script/HTML execution in affected installations. Root cause: improper input handling in admin_config.php; impact includes user session or data exposu...

SeaCMS Cross-Site Scripting Vulnerability (CNVD-2018-14092)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminconfig.php file in SeaCMS version 6.61. A remote attacker can exploit this vulnerabili...