CVE-2025-25796

The open-source web content management system SeaCMS v13.3 contains a remote code execution (RCE) vulnerability within the admin_template.php component. The root cause is identified as improper neutralization of special elements used in a command (Command Injection). This flaw allows for potentia...

CVE-2025-25802

SeaCMS version 13.3 contains a Remote Code Execution (RCE) vulnerability located in the admin_ip.php component. The root cause is identified as Improper Neutralization of Special Elements used in a Command (CWE-77), which could allow an attacker to execute arbitrary code. To remediate this, users...

CVE-2025-25519

Seacms =13.3 is vulnerable to SQL Injection in adminzyk.php...

CVE-2025-25519

Seacms =13.3 is vulnerable to SQL Injection in adminzyk.php...

CVE-2025-25521

Seacms =13.3 is vulnerable to SQL Injection in admintypenews.php...

CVE-2025-25516

Seacms =13.3 is vulnerable to SQL Injection in adminpaylog.php...

CVE-2025-25517

Seacms =13.3 is vulnerable to SQL Injection in adminreslib.php...

CVE-2025-25516

Seacms =13.3 is vulnerable to SQL Injection in adminpaylog.php...

CVE-2025-25517

Seacms =13.3 is vulnerable to SQL Injection in adminreslib.php...

CVE-2025-25520

Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...

CVE-2025-25521

Seacms =13.3 is vulnerable to SQL Injection in admintypenews.php...

CVE-2025-25520

Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...

CVE-2025-25515

Seacms =13.3 is vulnerable to SQL Injection in admincollect.php that allows an authenticated attacker to exploit the database...

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

CVE-2025-25515

Seacms =13.3 is vulnerable to SQL Injection in admincollect.php that allows an authenticated attacker to exploit the database...

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

CVE-2025-25519: Improper Neutralization of Special Elements used in an SQL Command

Seacms =13.3 is vulnerable to SQL Injection in adminzyk.php...

CVE-2025-25519

Seacms =13.3 is vulnerable to SQL Injection in adminzyk.php...

CVE-2025-25516: Improper Neutralization of Special Elements used in an SQL Command

Seacms =13.3 is vulnerable to SQL Injection in adminpaylog.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from an SQL injection in the admincollect.php file, allowing an...