1176 matches found
SeaCMS cross-site scripting vulnerability (CNVD-2018-19743)
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.64. A remote attacker can exploit this vulnerabilit...
Design/Logic Flaw
An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...
CVE-2018-17062
An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...
CVE-2018-17062
An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...
CVE-2018-17062
SeaCMS 6.64 contains a cross-site scripting (XSS) vulnerability in admin_video.php exploitable via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameters. The issue is documented across multiple sources (NVD CVE-2018-17062, CNVD-2018-19743, CVELIST, PRION) ...
CVE-2018-17062
An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...
CVE-2018-16445
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
Sql injection
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
CVE-2018-16444
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16446
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
CVE-2018-16446
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
CVE-2018-16445
An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...
Directory traversal
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...
Server side request forgery (ssrf)
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16444
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16445
SeaCMS ≤6.61 is affected by an SQL injection in adm1n/admin_topic_vod.php via the tid parameter. The root cause is an unsafely interpolated tid input leading to query manipulation, enabling unauthorized data access or modification. Affected product/line: SeaCMS (Ocean CMS). The CVSS metrics indic...
CVE-2018-16446
CVE-2018-16446 affects SeaCMS
CVE-2018-16444
CVE-2018-16444 affects SeaCMS 6.61 (and earlier noted in related CNVD/CVE records) with a server-side request forgery (SSRF) in the admin_reslib.php file accessed via the url parameter. The vulnerability allows an attacker, via crafted input, to induce SSRF without authentication, aligning with a...
CVE-2018-16444
An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...
CVE-2018-16446
An issue was discovered in SeaCMS through 6.61. adm1n/admindatabase.php allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting installlock.txt...