CVE-2025-11071 SeaCMS Cron Task Management admin_cron.php sql injection

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admincron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The...

PT-2025-39736

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3.20250820 Description A security issue exists in SeaCMS 13.3.20250820 related to the Cron Task Management Module. The issue involves SQL injection triggered by manipulating the collectID argument within the /admin cron.php...

CVE-2025-11071: Improper Neutralization of Special Elements used in an SQL Command

A security vulnerability has been detected in SeaCMS 13.3.20250820. Impacted is an unknown function of the file /admincron.php of the component Cron Task Management Module. The manipulation of the argument resourcefrom/collectID leads to sql injection. The attack can be initiated remotely. The...

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /adminmembers.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-10662

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /adminmembers.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-10662 SeaCMS admin_members.php sql injection

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /adminmembers.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-10662

CVE-2025-10662 affects SeaCMS up to version 13.3. The vulnerability is a SQL injection in the parameter ID manipulated in the file /admin_members.php?ac=editsave, allowing remote exploitation. The vulnerability is reported to be exploitable because the ID argument is unsafely handled, with public...

PT-2025-38308

Name of the Vulnerable Software and Affected Versions SeaCMS versions up to 13.3 Description A SQL injection issue exists in SeaCMS due to manipulation of the ID argument in the file /admin members.php?ac=editsave. This allows for remote exploitation. The exploit has been publicly disclosed...

CVE-2025-10662: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in SeaCMS up to 13.3. The impacted element is an unknown function of the file /adminmembers.php?ac=editsave. Such manipulation of the argument ID leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be use...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

CVE-2025-50592: Improper Neutralization of Input During Web Page Generation

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player...

PT-2025-31973 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: seacms versions prior to 13.2 Description: The software contains a cross site scripting issue. The issue is located in the vid parameter within the path Upload/js/player/dmplayer/player. Recommendations: Update seacms to version 13.2 or later...

CVE-2025-50592

The seacms content management system, primarily used for video-on-demand resources, is vulnerable to a Cross Site Scripting (XSS) issue in versions prior to 13.2 . The vulnerability is located in the vid parameter within the path Upload/js/player/dmplayer/player. This flaw could allow an attacker...

seacms 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in versions prior to seacms 13.2, which stems from cross-site scripting via the vid parameter...

CVE-2025-6864

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admintype.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...

CVE-2025-6864

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admintype.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...