CVE-2024-44918

A cross-site scripting XSS vulnerability in the component admindatarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44918

A cross-site scripting XSS vulnerability in the component admindatarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44916

Vulnerability in adminip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution...

CVE-2024-44916

Vulnerability in adminip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution...

SeaCMS 跨站脚本漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS v12.9, which stems from susceptibility to cross-site scripting XSS attacks that...

CVE-2024-44916: Improper Neutralization of Special Elements used in a Command

Vulnerability in adminip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44918

A cross-site scripting XSS vulnerability in the component admindatarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2024-44916

A command injection vulnerability exists in Seacms v13.1 within the admin_ip.php page. When the action=set parameter is used, an attacker can control IP parameters that are written to the data/admin/ip.php file, potentially leading to arbitrary command execution . As a remediation, it is recommen...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php. The CVE entry documents an XSS in SeaCMS v13 (admin-video.php) with a CVSS v3.1 base score 6.1 (MEDIUM). Exploitation details are not fully disclosed in the provided materials; CVSS suggests network access with user inter...

PT-2024-31303 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 13.1 Description: The issue allows attackers to control IP parameters written to the data/admin/ip.php file when the action is set, potentially resulting in arbitrary command execution. This occurs due to a vulnerability in the...

SeaCMS 命令注入漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A command injection vulnerability exists in SeaCMS v13.1, which stems from an arbitrary command execution vulnerability in the adminip.p...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version v13, which originates from a cross-site scripting vulnerability contained...

CVE-2024-44918: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component admindatarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2024-31210 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 13 Description: The issue is related to Cross Site Scripting XSS via the admin-video.php endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of potentially...

CVE-2024-44683: Improper Neutralization of Input During Web Page Generation

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44916

Vulnerability in adminip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution...

PT-2024-31304

Name of the Vulnerable Software and Affected Versions SeaCMS version 12.9 Description A cross-site scripting XSS vulnerability in the admin datarelate.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload. This issue enables attackers to run any web script ...

CVE-2024-44918

A cross-site scripting (XSS) vulnerability exists in the admin_datarelate.php component of SeaCMS v12.9 . The flaw allows an attacker to execute arbitrary web scripts or HTML by providing a crafted payload . While the documents confirm the existence of the vulnerability and its presence in the CM...