CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

CVE-2025-44074

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...

PT-2025-19804 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A remote code execution RCE vulnerability was discovered in SeaCMS via the component phomebak.php. This issue allows attackers to execute arbitrary code via a crafted request. Recommendations: For SeaCMS versi...

PT-2025-19806 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin topic.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin topic.php component...

CVE-2025-44074

SeaCMS v13.3 contains a SQL injection vulnerability in the admin_topic.php component. The CVE-2025-44074 entry tracks a high-severity issue (CVSS v3.1: 9.8, NETWORK attack, no authentication, user interaction required none; impacts Confidentiality, Integrity, Availability are High) with exploitat...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2, which stems from improper handling of the parameter cstatus in the file...

CVE-2025-44072: Improper Neutralization of Special Elements used in an SQL Command

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...

CVE-2025-44074: Improper Neutralization of Special Elements used in an SQL Command

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...

SeaCMS 代码注入漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A code injection vulnerability exists in SeaCMS version 13.2, which stems from improper handling of the parameter cstatus in the file...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from improper handling of the phomebak.php component and could lead to remo...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from mishandling of the adminmanager.php component, which could lead to SQL...

CVE-2025-44072

CVE-2025-44072 affects SeaCMS v13.3, with a SQL injection in the admin_manager.php component due to mishandling input. The CVSS v3.1 base score is 9.8 (CRITICAL), with NETWORK attack vector, LOW attack complexity, and no user interaction required. Impacts are HIGH on confidentiality, integrity, a...

CVE-2025-44071: Improper Control of Generation of Code

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

PT-2025-19320 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.2 Description: A problematic vulnerability was found in SeaCMS, affecting unknown code of the file /admin paylog.php. The manipulation of the cstatus argument leads to cross-site scripting. The attack can be initiated...

PT-2025-19325 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.2 Description: A problematic vulnerability has been found in SeaCMS, affecting the processing of the file /admin pay.php. The manipulation of the cstatus argument leads to cross-site scripting. The attack can be initiated...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from mishandling of the admintopic.php component, which could lead to SQL...

CVE-2025-4256: Improper Neutralization of Input During Web Page Generation

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-44072

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...

CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

CVE-2025-4257: Improper Neutralization of Input During Web Page Generation

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...