CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

SeaCMS 代码注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS v12.7, which stems from the manipulation of the ip parameter in its admin ip.php component that allows an...

PT-2023-15570 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 12.7 Description: The issue is related to a remote code execution RCE vulnerability. It can be exploited via the ip parameter at the "admin ip.php" endpoint. Recommendations: For Seacms version 12.7, consider restricting access...

CVE-2022-48093

CVE-2022-48093 affects SeaCMS/Seacms v12.7, with a remote code execution (RCE) vulnerability exploitable via the ip parameter in the admin_ip.php endpoint. Multiple connected sources (NVD, Red Hat advisory, CNNVD, CVE listings, etc.) confirm the issue and its impact, all citing the same vector in...

CVE-2021-39426

An issue was discovered in /Upload/admin/adminnotify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set...

CVE-2021-39426

An issue was discovered in /Upload/admin/adminnotify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set...

Code injection

An issue was discovered in /Upload/admin/adminnotify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set...

SeaCMS 代码注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 11.4. An attacker can exploit the vulnerability to execute arbitrary php code via the notify1...

CVE-2021-39426

CVE-2021-39426 affects SeaCMS Seacms 11.4. The vulnerability exists in /Upload/admin/admin_notify.php where an attacker can execute arbitrary PHP code via the notify1 parameter when action equals set. The issue has a CVSS v3.1 base score of 9.8 (CRITICAL) with NETWORK attack vector, no privileges...

CVE-2021-39426

An issue was discovered in /Upload/admin/adminnotify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set...

CVE-2021-39426

An issue was discovered in /Upload/admin/adminnotify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter when the action parameter equals set...

Seacms Remote Code Execution (CVE-2022-27336)

A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2022-43256

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php...

CVE-2022-43256

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php...

Sql injection

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php...

CVE-2022-43256

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php...

CVE-2022-43256

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php...

SeaCMS SQL注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in versions of SeaCMS prior to v12.6, which stems from its /js/player/dmplayer/dmku/index.php component that...

PT-2022-26812 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCms versions prior to 12.6 Description: A SQL injection issue was found in SeaCms via the /js/player/dmplayer/dmku/index.php component. Recommendations: For versions prior to 12.6, update to version 12.6 or later to resolve the issue...

CVE-2022-43256

SeaCms before v12.6 has a SQL injection vulnerability in the /js/player/dmplayer/dmku/index.php component. Root cause: unsafely constructed SQL queries allow unauthenticated attackers to inject payloads. Impact per sources is high across confidentiality, integrity, and availability (CVSS 3.1 base...