Arbitrary Password Reset Vulnerability in SeaCMS

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from an arbitrary password reset vulnerability that can be exploited by an attacker to reset passwords...

Code Execution Vulnerability in Ocean Cms

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A code execution vulnerability exists in ocean cms. An attacker can exploit this vulnerability to execute code...

SeaCMS cross-site scripting vulnerability (CNVD-2019-08330)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. A stored cross-site scripting vulnerability exists in SeaCMS 6.6.4, which can be exploited by an attacker during a password change via the member.php?action=chgpwdsubmit email parameter...

CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19350

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

Cross site scripting

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19350

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

Sql injection

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19349

SeaCMS 6.64 is affected by CVE-2018-19349 via an SQL injection in the admin_makehtml.php topic parameter, caused by mishandling in include/mkhtml.func.php. This vulnerability is corroborated by multiple connected records (CNVD/NVD). The documented impact includes database integrity/ confidentiali...

CVE-2018-19350

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...

CVE-2018-19349

In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...

CVE-2018-19350

SeaCMS v6.6.4 is vulnerable to a stored XSS via the email parameter in member.php?action=chgpwdsubmit during password changes. The issue is demonstrated by a data: URL inside an OBJECT element. Confirmed by multiple sources (NVD entry CVE-2018-19350 and CNVD/CVEs referencing SeaCMS 6.6.4). The vu...

SeaCMS Arbitrary File Deletion Vulnerability (CNVD-2018-20079)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 6.64. A remote attacker can exploit the vulnerability to delete arbitrary files with the hel...

CVE-2018-17365

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...

CVE-2018-17365

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...

Code injection

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...

CVE-2018-17365

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter...

CVE-2018-17365

SeaCMS versions 6.64 and 7.2 expose an ARBITRARY FILE DELETION vulnerability exploitable via the filedir parameter. The root cause is improper handling of the filedir input, allowing remote attackers to delete files on the server. Impact is exposure of file deletion capability (integrity/availabi...

SeaCMS Path Traversal Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A path traversal vulnerability exists in SeaCMS version 6.64, which can be exploited by an attacker by sending...