CVE-2025-6864

SeaCMS up to 13.2 contains a cross-site request forgery (CSRF) vulnerability in an unknown function of /admin_type.php. The issue can be exploited remotely and exploit details have been publicly disclosed. CVSS data indicate network access, low attack complexity, no privileges required, and user ...

CVE-2025-6864 SeaCMS admin_type.php cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admintype.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...

CVE-2025-6864 SeaCMS admin_type.php cross-site request forgery

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admintype.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...

CVE-2025-6864: Cross-Site Request Forgery (CSRF)

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admintype.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to...

PT-2025-27370 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions up to 13.2 Description: A problematic issue has been found in SeaCMS, affecting some unknown functionality of the file /admin type.php. This issue leads to cross-site request forgery and can be exploited remotely...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

SeaCMS SQL注入漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 12.9, which stems from the admindatarelate.php component being susceptible to SQL...

PT-2025-25752 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A SQL Injection issue allows a remote attacker to obtain sensitive information via the "admin datarelate.php" component. Recommendations: For SeaCMS version 12.9, update to a version that fixes this issue, as...

CVE-2024-40570

A SQL Injection vulnerability exists in SeaCMS v.12.9 , specifically within the admin_datarelate.php component. A remote attacker can exploit this flaw to obtain sensitive information . While the vulnerability is confirmed, the provided documents do not specify a patched version or a specific rem...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2024-40570: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admindatarelate.php component...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44916

Vulnerability in adminip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution...

CVE-2024-44918

A cross-site scripting XSS vulnerability in the component admindatarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44920

A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...

CVE-2024-44921

SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...

CVE-2024-44919

A cross-site scripting XSS vulnerability in the component adminads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the ad description parameter...