SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2, which can be exploited by an attacker to execute arbitrary code on the server b...

CVE-2024-46640

SeaCMS version 13.2 is susceptible to a remote code execution (RCE) vulnerability within the sql.class.chp file. The root cause is that a specific check function is not executed during operation, which allows an attacker to write to the file via the MySQL slow query method. This vulnerability ena...

CVE-2024-46640

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...

CVE-2024-46640

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...

CVE-2024-46640: Improper Control of Generation of Code

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method...

PT-2024-32088

Name of the Vulnerable Software and Affected Versions SeaCMS version 13.2 Description The issue is a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, it is not executed during execution, allowing remote code execution by writing to t...

CVE-2024-44720

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...

CVE-2024-44721

SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...

CVE-2024-44721

SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...

CVE-2024-44720

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...

CVE-2024-44720

SeaCMS v13.1 is susceptible to an arbitrary file read vulnerability located within the admin_safe.php component. This flaw allows an attacker to read files from the server. While no specific exploit details or real-world incidents are documented, it is recommended to disable access to the admin_s...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1 that stems from a server-side request forgery SSRF vulnerability in the url...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from an arbitrary file read vulnerability in the component...

CVE-2024-44720

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...

CVE-2024-44721: Server-Side Request Forgery (SSRF)

SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...

PT-2024-31220 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.1 Description: The issue is an arbitrary file read vulnerability. It affects the admin safe.php component. There is no information provided about the estimated number of potentially affected devices worldwide or real-world...

CVE-2024-44720

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...

CVE-2024-44721

SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...

CVE-2024-44720: Improper Limitation of a Pathname to a Restricted Directory

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...

CVE-2024-44721

The open-source video-on-demand management system SeaCMS v13.1 is vulnerable to a Server-Side Request Forgery (SSRF) . This flaw exists due to improper handling of the url parameter at the /admin_reslib.php API endpoint. An attacker could potentially leverage this to make the server perform unaut...