1149 matches found
CVE-2024-39028
An issue was discovered in SeaCMS =12.9 which allows remote attackers to execute arbitrary code via adminping.php...
PT-2024-28337 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS versions =12.9 Description: An issue in SeaCMS allows remote attackers to execute arbitrary code via the "admin ping.php" endpoint. This enables attackers to run malicious code on the affected system. Recommendations: For SeaCMS versio...
CVE-2024-6416
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...
CVE-2024-6416
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...
CVE-2024-6416 SeaCMS sql injection
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...
CVE-2024-6416
SeaCMS 12.9 is affected by a remote SQL injection vulnerability in /js/player/dmplayer/dmku/?ac=edit, caused by manipulating the cid parameter (example payload: (select(0)from(select(sleep(10)))v)). Multiple trusted sources corroborate that this vulnerability can be exploited remotely and that th...
CVE-2024-6416 SeaCMS sql injection
A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...
SeaCMS SQL Injection Vulnerability
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which stems from the fact that manipulation of the parameter cid using inpu...
PT-2024-37609 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A critical issue has been found in SeaCMS, affecting an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the cid argument with a specific input leads to SQL injection...
CVE-2024-31611
SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...
CVE-2024-31611
SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...
CVE-2024-31611
SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...
CVE-2024-31611
SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...
PT-2024-24152 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to a file deletion vulnerability. It can be exploited via the admin template.php file. Recommendations: For SeaCMS version 12.9, consider restricting access to the admin template.php file...
SeaCMS Security Vulnerability
SeaCMS is a free, open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 12.9. An attacker can exploit the vulnerability to delete files via admintemplate.php...
CVE-2024-31611
SeaCMS 12.9 is affected by CVE-2024-31611 due to a file deletion vulnerability in admin_template.php. The CVSS v3.1 base score is 9.1 (CRITICAL) with Network access, Low complexity, NONE privileges, no user interaction, and impacts to integrity and availability (I:H, A:H). The connected sources c...
CVE-2024-30565
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565
An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...
CVE-2024-30565
SeaCMS 12.9 is affected by a remote code execution vulnerability exploitable via the admin notify.php endpoint. Public records confirm impact on SeaCMS and mention arbitrary code execution through this endpoint, but the provided documents do not specify a concrete exploit vector, affected version...