CVE-2018-11583

CVE-2018-11583 affects SeaCMS 6.61, with a stored XSS in admin_collect.php via the siteurl parameter. Root cause per records is unescaped/sanitized input in siteurl leading to script injection. NVD metrics indicate confidentiality impact NONE and integrity impact PARTIAL (availability NONE); user...

SeaCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability to inject arbitrary web...

Arbitrary File Deletion Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file deletion vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to arbitrarily delete files...

Arbitrary File Read Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file read vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to read arbitrary files...

PT-2018-10684

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to stored XSS in the admin collect.php file, specifically via the siteurl parameter. Recommendations For SeaCMS version 6.61, consider restricting access to the admin collect.php file or...

CVE-2018-11583: Improper Neutralization of Input During Web Page Generation

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

SeaCMS system has an override access vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in the SeaCMS system. Because the program does not effectively filter the data written to the write...

seacms前台一处鸡肋报错注入，绕过80sec，360webscan获取数据

...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

Code injection

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 is affected by an arbitrary PHP code execution vulnerability. Remote authenticated administrators can exploit a crafted token field sent to admin/admin_ping.php (which interacts with data/admin/ping.php) to run arbitrary PHP code on the server. This vulnerability is documented across ...

PT-2017-14856

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.56 Description The issue allows remote authenticated administrators to execute arbitrary PHP code. This is achieved by crafting a token field to the admin/admin ping.php endpoint, which interacts with data/admin/ping.php...

CVE-2017-17561: Undefined Security Weakness

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

Command Execution Vulnerability in seacms Backend

seacms is a video-on-demand system based on PHP+MySql technology. His message board cms/gbook.php has a backend command execution vulnerability due to the system not validating incoming content. An attacker is allowed to exploit this vulnerability to execute arbitrary commands...

seacms search.php code execution vulnerability

function parseIf$content if strpos$content,'if:'=== false return $content; else $labelRule = buildregx"if:.? .? end if","is"; $labelRule2="elseif"; $labelRule3="else"; pregmatchall$labelRule,$content,$iar; $arlen=count$iar0; $elseIfFlag=false; for$m=0;$mparseStrIf$strIf; $strThen=$iar2$m;...

seacms /htdocs/seacms/member.php id参数 SQL注入

No description provided by source...

seacms /htdocs/seacms/reg.php ip参数 SQL注入

No description provided by source...

Multiple SQL Injection Vulnerabilities in Seacms

SeaCms is a set of applications for building online movies with PHP+MYSQL architecture. Seacms has multiple SQL injection vulnerabilities. Allow attackers to exploit the vulnerabilities to obtain sensitive database information...