Remote code execution

seacms V11.5 is affected by an arbitrary code execution vulnerability in adminconfig.php...

CVE-2022-23878

seacms V11.5 is affected by an arbitrary code execution vulnerability in adminconfig.php...

CVE-2022-23878

CVE-2022-23878 affects seacms V11.5 with an arbitrary code execution vulnerability in admin_config.php. Multiple connected sources confirm that an attacker can write malicious files to the site and execute commands, leading to full impact on affected installations. CVSS data from NVD indicates hi...

SeaCMS 安全漏洞

seacms Ocean Video Management System is a video-on-demand system designed for webmasters with different needs. seacms V11.5 has an arbitrary code execution vulnerability, which can be exploited by attackers to write malicious files to the site and execute commands...

Seacms Remote Code Execution (CVE-2021-37358)

A remote code execution vulnerability exists in Seacms. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

Sql injection

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

CVE-2021-37358 affects SEACMS v210530. Multiple sources describe a SQL Injection via the admin_ajax.php?action=checkrepeat&v_name parameter, enabling remote attackers to execute arbitrary code. NVD lists high to critical severity (CVSS v2: 7.5/10; CVSS v3.1: 9.8/10) with network access, no authen...

SeaCMS SQL注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SEACMS v210530, which stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2021-29313

CVE-2021-29313 affects SeaCMS 12.6, with a cross-site scripting (XSS) flaw exploitable via the (1) v_company and (2) v_tvs parameters in /admin_video.php. The NVD entry lists CVSS2/3 base scores of 4.3 (MEDIUM) and 6.1 (MEDIUM) respectively, reflecting network attack vector, no authentication, an...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...