SQL Injection Vulnerability in Ocean CMS

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. Ocean CMS is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

Cross site scripting

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

CVE-2018-11583 affects SeaCMS 6.61, with a stored XSS in admin_collect.php via the siteurl parameter. Root cause per records is unescaped/sanitized input in siteurl leading to script injection. NVD metrics indicate confidentiality impact NONE and integrity impact PARTIAL (availability NONE); user...

Arbitrary File Deletion Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file deletion vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to arbitrarily delete files...

Arbitrary File Read Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file read vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to read arbitrary files...

SeaCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability to inject arbitrary web...

CVE-2018-11583: Improper Neutralization of Input During Web Page Generation

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

SeaCMS system has an override access vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in the SeaCMS system. Because the program does not effectively filter the data written to the write...

seacms前台一处鸡肋报错注入，绕过80sec，360webscan获取数据

...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

Code injection

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 is affected by an arbitrary PHP code execution vulnerability. Remote authenticated administrators can exploit a crafted token field sent to admin/admin_ping.php (which interacts with data/admin/ping.php) to run arbitrary PHP code on the server. This vulnerability is documented across ...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561: Undefined Security Weakness

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

Command Execution Vulnerability in seacms Backend

seacms is a video-on-demand system based on PHP+MySql technology. His message board cms/gbook.php has a backend command execution vulnerability due to the system not validating incoming content. An attacker is allowed to exploit this vulnerability to execute arbitrary commands...

seacms search.php code execution vulnerability

function parseIf$content if strpos$content,'if:'=== false return $content; else $labelRule = buildregx"if:.? .? end if","is"; $labelRule2="elseif"; $labelRule3="else"; pregmatchall$labelRule,$content,$iar; $arlen=count$iar0; $elseIfFlag=false; for$m=0;$mparseStrIf$strIf; $strThen=$iar2$m;...