1342 matches found
CVE-2024-55461
SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...
CVE-2024-55461
SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...
PT-2024-36521 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions =13.0 Description: The issue allows for command execution in the phome.php file through the Ebak RepPathFiletext function. This enables an attacker to execute commands on the system. Recommendations: For SeaCMS versions =13.0,...
CVE-2024-55461: Improper Neutralization of Special Elements used in a Command
SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...
CVE-2024-55461
SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...
CVE-2024-55461
SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.0 and earlier, which stems from the function EbakRepPathFiletext in phome.php that...
CVE-2024-55461
SeaCMS versions
CVE-2024-50808
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...
CVE-2024-50808
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...
PT-2024-34416 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...
CVE-2024-50808
SeaCms version 13.1 is vulnerable to code injection within the notification module of the member message notification module in the backend user module. The root cause is the unsafe handling of the "notify" variable in the admin_notify.php file. This vulnerability could allow an attacker to injec...
CVE-2024-50808: Improper Control of Generation of Code
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1 that stems from insecure handling of the notify variable in adminnotify.php...
CVE-2024-50808
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...
CVE-2024-50808
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...
Unspecified Vulnerability in SeaCMS (CNVD-2024-39253)
SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2, which can be exploited by an attacker to execute arbitrary code on the server b...
CVE-2024-46640
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...
CVE-2024-46640
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...