1441 matches found
CVE-2018-13445
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
CVE-2018-13444
CVE-2018-13444 affects SeaCMS 6.61. The issue is a cross-site request forgery (CSRF) that can add an administrator account via the URL adm1n/admin_manager.php?action=save&id=2. The connected documents confirm the vulnerability exists in SeaCMS 6.61 and describe the admin-adding vector, but there ...
CVE-2018-13445
SeaCMS 6.61 is affected by a CSRF vulnerability that allows an attacker to add a user account via adm1n/admin_manager.php?action=add. The root cause is CSRF in the admin interface; impact indicates high severity (NVD CVSS3: 8.8) with network origin, no authentication, and high confidentiality, in...
CVE-2018-13444: Cross-Site Request Forgery (CSRF)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...
CVE-2018-13445: Cross-Site Request Forgery (CSRF)
An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...
PT-2018-11828
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description A CSRF issue allows adding a user account via the "adm1n/admin manager.php?action=add" endpoint. Recommendations For SeaCMS version 6.61, consider disabling the user account addition functionality in the...
PT-2018-11827
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description A CSRF issue allows adding an admin account via the "adm1n/admin manager.php?action=save&id=2" endpoint. Recommendations For SeaCMS version 6.61, update to a newer version that contains a fix for this issue, or ...
SeaCMS Cross-Site Scripting Vulnerability (CNVD-2018-14550)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability by sending the 'site name...
Cross site scripting
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
CVE-2018-12431
SeaCMS V6.61 is vulnerable to Cross‑Site Scripting via the site name parameter on adm1n/admin_config.php (system management page). The root cause is an XSS flaw in the site name input; impact is user‑visible script injection. The connected records confirm the vulnerability across multiple sources...
CVE-2018-12431: Improper Neutralization of Input During Web Page Generation
SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...
PT-2018-11167
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the site name parameter on the "adm1n/admin config.php" page, which is a system management page. Recommendations For SeaCMS version 6.61,...
SQL Injection Vulnerability in Ocean CMS
Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. Ocean CMS is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...
CVE-2018-11583
SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...
Cross site scripting
SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...