CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

CVE-2025-44074

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...

CVE-2025-44072

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admincommentnews.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v13.3, which stems from an SQL injection caused by the admincommentnews.php component...

PT-2025-19959 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin comment news.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin comment...

CVE-2025-44073

SeaCMS v13.3 is affected by a SQL injection in the admin_comment_news.php component. The vulnerability allows unauthenticated, network-based exploitation with high impact on confidentiality, integrity, and availability (CVSS 3.1: 9.8, CRITICAL). Root cause details are not elaborated beyond the SQ...

CVE-2025-44074

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...

CVE-2025-44072

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component adminmanager.php...

CVE-2025-44074

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admintopic.php...

CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request...

CVE-2025-4257

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-4257

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-4256

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /adminpaylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and...

CVE-2025-4257 SeaCMS admin_pay.php cross site scripting

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...

CVE-2025-4257

SeaCMS 13.2 contains a cross-site scripting vulnerability in the /admin_pay.php handler caused by improper handling of the cstatus parameter. The issue can be triggered remotely and an exploit has been disclosed. At present, no official patch/version is stated in the provided documents. A documen...