1342 matches found
CVE-2025-25793
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3 that stems from a Remote Code Execution RCE issue with the isopen parameter in the...
CVE-2025-25792
SeaCMS v13.3 contains a Remote Code Execution (RCE) vulnerability caused by the improper neutralization of special elements used in a command (CWE-77). The flaw exists in the isopen parameter at the admin_weixin.php endpoint, allowing an attacker to execute arbitrary code remotely. Practical cons...
PT-2025-8716
Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin ping.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, consider disabling access to the admin ping.php...
CVE-2025-25794
The open-source web content management system SeaCMS v13.3 is susceptible to a remote code execution (RCE) vulnerability within the admin_ping.php component. The root cause is identified as CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') , which allows ...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a remote code execution issue in the adminfiles.php component...
CVE-2025-25797: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminsmtp.php...
CVE-2025-25799: Files or Directories Accessible to External Parties
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php...
CVE-2025-25799
SeaCMS version 13.3 is susceptible to an arbitrary file read vulnerability located in the admin_safe.php file. The flaw originates from the improper use of the file_get_contents function at the admin_safe.php endpoint, which could allow unauthorized access to sensitive files. As a temporary worka...
CVE-2025-25800
SeaCMS version 13.3 is vulnerable to an arbitrary file read vulnerability within the file_get_contents function located in the admin_safe_file.php file. This flaw, characterized as a path traversal issue (CWE-22 ), could lead to the disclosure of sensitive information. As a temporary workaround, ...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a Remote Code Execution RCE issue in the component admintemplate.php...
PT-2025-8714
Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was found in SeaCMS, allowing attackers to execute code remotely via the isopen parameter at the "admin weixin.php" endpoint. Recommendations For SeaCMS version 13.3, consider...
PT-2025-8718
Name of the Vulnerable Software and Affected Versions SeaCMS version 13.3 Description A remote code execution issue was discovered in the admin smtp.php component, allowing for potential code execution. Recommendations For SeaCMS version 13.3, update to a version that includes a fix for this issu...
CVE-2025-25792
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...
CVE-2025-25799
SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php...
CVE-2025-25794
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from a remote code execution RCE issue in the adminsmtp.php component...
CVE-2025-25802: Improper Neutralization of Special Elements used in a Command
SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminip.php...