Lucene search
+L

1342 matches found

OSV
OSV
•added 2024/12/18 11:15 p.m.•24 views

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References1
NVD
NVD
•added 2024/12/18 11:15 p.m.•32 views

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

9.8CVSS0.01147EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/12/18 12:00 a.m.•12 views

PT-2024-36521 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions =13.0 Description: The issue allows for command execution in the phome.php file through the Ebak RepPathFiletext function. This enables an attacker to execute commands on the system. Recommendations: For SeaCMS versions =13.0,...

9.8CVSS7.6AI score0.01147EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/12/18 12:00 a.m.•1 views

CVE-2024-55461: Improper Neutralization of Special Elements used in a Command

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

9.8CVSS5.9AI score0.01147EPSS
SaveExploits1References1
Vulnrichment
Vulnrichment
•added 2024/12/18 12:00 a.m.•12 views

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

7.3AI score0.01147EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/12/18 12:00 a.m.•38 views

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

0.01147EPSS
SaveExploits1References1
CNNVD
CNNVD
•added 2024/12/18 12:00 a.m.•20 views

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.0 and earlier, which stems from the function EbakRepPathFiletext in phome.php that...

9.8CVSS7.1AI score0.01147EPSS
SaveExploits1References1
CVE
CVE
•added 2024/12/18 12:00 a.m.•86 views

CVE-2024-55461

SeaCMS versions

9.8CVSS7.1AI score0.01147EPSS
SaveExploits1References1Affected Software1
OSV
OSV
•added 2024/11/08 9:15 p.m.•12 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

8.8CVSS5.8AI score0.006EPSS
SaveExploits1References2
NVD
NVD
•added 2024/11/08 9:15 p.m.•27 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

8.8CVSS0.006EPSS
SaveExploits1References1
Positive Technologies
Positive Technologies
•added 2024/11/08 12:00 a.m.•21 views

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...

8.8CVSS7.5AI score0.006EPSS
SaveExploits1References8
CVE
CVE
•added 2024/11/08 12:00 a.m.•85 views

CVE-2024-50808

SeaCms version 13.1 is vulnerable to code injection within the notification module of the member message notification module in the backend user module. The root cause is the unsafe handling of the "notify" variable in the admin_notify.php file. This vulnerability could allow an attacker to injec...

8.8CVSS7AI score0.006EPSS
SaveExploits1References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/11/08 12:00 a.m.•4 views

CVE-2024-50808: Improper Control of Generation of Code

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

8.8CVSS5.8AI score0.006EPSS
SaveExploits1References3
CNNVD
CNNVD
•added 2024/11/08 12:00 a.m.•15 views

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1 that stems from insecure handling of the notify variable in adminnotify.php...

8.8CVSS6.8AI score0.006EPSS
SaveExploits1References2
Vulnrichment
Vulnrichment
•added 2024/11/08 12:00 a.m.•14 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

7.3AI score0.006EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/11/08 12:00 a.m.•34 views

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

0.006EPSS
SaveExploits1References1
CNVD
CNVD
•added 2024/09/24 12:00 a.m.•18 views

Unspecified Vulnerability in SeaCMS (CNVD-2024-39253)

SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2, which can be exploited by an attacker to execute arbitrary code on the server b...

9.8CVSS7.8AI score0.00999EPSS
SaveExploits2References1
OSV
OSV
•added 2024/09/20 9:15 p.m.•14 views

CVE-2024-46640

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...

9.8CVSS6.3AI score0.00999EPSS
SaveExploits2References1
NVD
NVD
•added 2024/09/20 9:15 p.m.•24 views

CVE-2024-46640

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...

9.8CVSS0.00999EPSS
SaveExploits2References1
Gitee
Gitee
•added 2024/09/20 8:22 a.m.•72 views

Exploit for Code Injection in Seacms

No description provided...

9.8CVSS7AI score0.00999EPSS
SaveExploits2
Rows per page
Query Builder