1342 matches found
CVE-2025-44072
SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...
CVE-2025-44071
CVE-2025-44071 concerns SeaCMS v13.3 with a remote code execution (RCE) vulnerability in the phomebak.php component. The issue is described as an improper handling/exposure of phomebak.php that allows an attacker to execute arbitrary code via a crafted request. Impact is high (C/H/I/A = 9.8) with...
CVE-2025-3797
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-3792
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-3797
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-3797
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-3797
SeaCMS up to version 13.3 is affected by an SQL injection in /admin_topic.php?action=delall caused by manipulation of the e_id parameter. The vulnerability is exploitable remotely, and multiple sources confirm exploitation is disclosed publicly. Impact is SQL injection; exact affected build range...
CVE-2025-3797 SeaCMS admin_topic.php sql injection
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-3797 SeaCMS admin_topic.php sql injection
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
CVE-2025-3797: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admintopic.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...
PT-2025-17371 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions up to 13.3 Description: A critical vulnerability was found in SeaCMS, affecting the file /admin topic.php?action=delall. The manipulation of the e id argument leads to SQL injection. The attack can be initiated remotely. The...
SeaCMS 注入漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. An injection vulnerability exists in SeaCMS 13.3 and earlier versions, which stems from an SQL injection due to the operation of the...
CVE-2025-3792
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-3792
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-3792 SeaCMS admin_link.php sql injection
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...
CVE-2025-3792
SeaCMS prior to version 13.4/13.3 is affected by a SQL injection in admin_link.php?action=delall via manipulation of the e_id parameter. The vulnerability is invoked remotely and exploitation has been publicly disclosed. Affected product: SeaCMS (≤13.3; some sources reference ≤13.4). Root cause d...
CVE-2025-3792 SeaCMS admin_link.php sql injection
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...
PT-2025-17265 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions prior to 13.4 Description: A critical vulnerability exists in SeaCMS. The issue affects unknown processing within the /admin link.php?action=delall file. Manipulation of the e id argument results in a SQL injection. The attack...
CVE-2025-3792: Improper Neutralization of Special Elements used in an SQL Command
A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...