SeaCMS Server-Side Request Forgery Vulnerability

SeaCMS Ocean CMS is a professional open source free PHP film and television system. There is a server-side request forgery vulnerability in adm1n/adminreslib.php in 6.61 and earlier versions of SeaCMS, which can be exploited by an attacker through the url parameter to conduct a server-side reques...

SeaCMS cross-site scripting vulnerability (CNVD-2018-19071)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in the adminvideo.php file in SeaCMS version 6.61, which can be exploited by remote attackers to...

SeaCMS SQL Injection Vulnerability (CNVD-2019-08332)

SeaCMS Ocean CMS is a professional open source free PHP film and television system. 6.61 and earlier versions of SeaCMS SQL injection vulnerability, attackers can through the adm1n/admintopicvod.php request in the tid parameter to take advantage of the vulnerability for SQL injection attacks...

CVE-2018-16444: Server-Side Request Forgery (SSRF)

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

Cross site scripting

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16343

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

CVE-2018-16343

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

Design/Logic Flaw

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

CVE-2018-16343

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16348

SeaCMS v6.61 suffers a cross-site scripting (XSS) vulnerability in admin_video.php via the v_content parameter related to the site name. According to CNVD-2018-19071, remote attackers can exploit this to inject arbitrary web script or HTML. There is no remediation or patch information provided in...

CVE-2018-16343

SeaCMS 6.61 contains a remote code execution flaw: the parseIf() function in include/main.class.php fails to block use of $GLOBALS, enabling attackers to run arbitrary code. This has been documented across multiple sources (CNVD-2018-19075 and NVD/NVD-derived entries) and is tied to SeaCMS’s PHP ...

CVE-2018-16348: Improper Neutralization of Input During Web Page Generation

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16343: Improper Control of Generation of Code

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf in include/main.class.php does not block use of $GLOBALS...

Arbitrary File Deletion Vulnerability in seacms v6.61

seacms is a free and open source web content management system written in PHP. The system is mainly used to manage video-on-demand resources. seacms v6.61 version of the arbitrary file deletion vulnerability , an attacker can use the vulnerability to arbitrarily delete files...

SQL Injection Vulnerability in seacms

seacms is a video-on-demand content management system designed for different needs. A SQL injection vulnerability exists in seacms. An attacker can exploit the vulnerability to obtain sensitive database information...

SeaCMS Remote Code Execution Vulnerability (CNVD-2019-08329)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A remote code execution vulnerability exists in SeaCMS version 6.61, which can be exploited by remote attackers to execute code by writing PHP...

Cross site request forgery (csrf)

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...

CVE-2018-14910

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...