CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from vulnerability to a false access control attack, leading to a...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from vulnerability to false access control attacks, leading to a log...

CVE-2024-54879

SeaCMS v13.1 is affected by an Incorrect Access Control flaw in the membership recharge logic, enabling any user to indefinitely recharge members. Root cause: a logical access-control weakness in the recharge functionality. Documented impact: potential unauthorized recharges; CVSS v3.1 base score...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

PT-2025-3082 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.1 Description: The issue is related to incorrect access control, allowing an attacker to exploit a logic flaw and enable any user to recharge members indefinitely. Recommendations: For SeaCMS version 13.1, consider restricti...

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

CVE-2024-54880

CVE-2024-54880 affects SeaCMS V13.1. The vulnerability is an Incorrect Access Control that enables a logic flaw, allowing any user to register accounts in bulk. Documented impact is high (CVSS 3.1: 9.1, CRITICAL) with network attack vector and no user interaction required. Connected sources consi...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.0 and earlier, which stems from the function EbakRepPathFiletext in phome.php that...

CVE-2024-55461

CVE-2024-55461 affects SeaCMS

PT-2024-36521 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions =13.0 Description: The issue allows for command execution in the phome.php file through the Ebak RepPathFiletext function. This enables an attacker to execute commands on the system. Recommendations: For SeaCMS versions =13.0,...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

CVE-2024-50808

SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in adminnotify.php...

PT-2024-34416 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms version 13.1 Description: The issue is related to a code injection vulnerability in the notification module of the member message notification module in the backend user module. This vulnerability occurs due to the unsafe handling of t...