CVE-2020-21378

SQL injection vulnerability in SeaCMS 10.1 2020.02.08 via the id parameter in an edit action to adminmembersgroup.php...

CVE-2020-21378

SeaCMS 10.1 (2020.02.08) is affected by a SQL injection vulnerability in the edit action of admin_members_group.php, exploitable via the id parameter. The issue is documented across multiple sources as a SQL injection in SeaCMS 10.1, with root cause being unsafely constructed SQL in the edit work...

SeaCMS SQL注入漏洞

SeaCMS Ocean CMS is a professional open source free PHP film and television system. SeaCMS 10.1 2020.02.08 suffers from a SQL injection vulnerability. An attacker can exploit this vulnerability by using the id parameter in the edit operation of adminmembersgroup.php to perform a SQL injection...

Seacms 11.1 - 'file' Local File Inclusion

Exploit Title: Seacms 11.1 - 'file' Local File Inclusion Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 GET /SEACMS111/5f9js3/adminsafe.php?action=download&file=C:/windows/system.ini HTTP/1.1 Host: 192.168.137.139...

Seacms 11.1 - 'checkuser' Stored XSS

Exploit Title: Seacms 11.1 - 'checkuser' Stored XSS Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 POST /SEACMS111/5f9js3/adminsafe.php?action=setting HTTP/1.1 Host: 192.168.137.139 User-Agent: Mozilla/5.0 Windows N...

Seacms 11.1 - 'ip and weburl' Remote Command Execution

Exploit Title: Seacms 11.1 - 'ip and weburl' Remote Command Execution Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 POST /SeaCMS111/5f9js3/adminip.php?action=set HTTP/1.1 Host: 192.168.137.139 User-Agent: Mozilla/5...

Seacms 11.1 Cross Site Scripting

Exploit Title: Seacms 11.1 - 'checkuser' Stored XSS Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 POST /SEACMS111/5f9js3/adminsafe.php?action=setting HTTP/1.1 Host: 192.168.137.139 User-Agent: Mozilla/5.0 Windows N...

Seacms 11.1 Local File Inclusion

Exploit Title: Seacms 11.1 - 'file' Local File Inclusion Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 GET /SEACMS111/5f9js3/adminsafe.php?action=download&file=C:/windows/system.ini HTTP/1.1 Host: 192.168.137.139...

Seacms 11.1 Remote Command Execution

Exploit Title: Seacms 11.1 - 'ip and weburl' Remote Command Execution Date: 20201212 Exploit Author: j5s Vendor Homepage: https://www.seacms.net/ Software Link: https://www.seacms.net/ Version: 11.1 POST /SeaCMS111/5f9js3/adminip.php?action=set HTTP/1.1 Host: 192.168.137.139 User-Agent: Mozilla/5...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_we***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption, more secure. Sea CMS-v10.9 SeaCMS adwe.php file has a command execution vulnerability, attackers can use this...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_pi***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption. There is a command execution vulnerability in the file adpi.php in SeaCMS-v10.9 SeaCMS. An attacker can exploit this...

Command Execution Vulnerability in the ad***_ip***.php File in SeaCMS-v10.9 (SeaCMS)

Ocean CMS, also known as SeaCMS, using php + mysql development, completely open source and free of charge, adaptive to computers, cell phones, tablets, APP multi-terminal, no encryption, more secure, is a very good tool to build the station! Ocean CMS-v10.9 SeaCMS adip.php file has a command...

Command Execution Vulnerability in Ocean CMS-v10.9 (SeaCMS) ad***_no***.php File

Ocean CMS, also known as SeaCMS, is developed by php+mysql, completely open source and free of charge, adaptive to computer, cell phone, tablet, APP multi-terminal, no encryption, more secure. Sea CMS-v10.9 SeaCMS adno.php file has a command execution vulnerability, attackers can use this...

Arbitrary File Read Vulnerability in SeaCMS

SeaCMS is designed to solve the core needs of station owners and a set of program adaptive computer, cell phone, tablet, APP multiple terminal entrance content management system. SeaCMS has an arbitrary file reading vulnerability that can be exploited by attackers to obtain sensitive information...

Command Execution Vulnerability in SeaCMS (CNVD-2020-48920)

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has a command execution vulnerability that can be exploited by attackers to gain control of a web server...

Command execution vulnerability in SeaCMS backend ad***_pi***.php page

SeaCMS is a station building system based on PHP+MYSQL architecture and supports cross-platform operation. A command execution vulnerability exists in the adpi.php page in the background of SeaCMS. An attacker can exploit the vulnerability to gain control of the server...

Command Injection Vulnerability in SeaCMS V10.1

Ocean Movie Management System SeaCMS, Ocean CMS is a content management system designed to address the core needs of webmasters. SeaCMS V10.1 suffers from a command injection vulnerability that can be exploited by attackers to execute arbitrary commands...

Command execution vulnerability exists in SeaCMS (CNVD-2020-26556)

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. SeaCMS has a command execution vulnerability that can be exploited by attackers to gain control of a web server...

SeaCMS suffers from SQL injection vulnerability (CNVD-2020-23523)

SesCMS is a PHP content management system a set of programs adaptive computer, cell phone, tablet, APP multiple terminal entrance station-building tool. SeaCMS SQL injection vulnerability, attackers can use the vulnerability to obtain sensitive database information...

Arbitrary File Deletion Vulnerability in SeaCMS Backend

SeaCMS is a web content management system based on PHP+MYSQL architecture and supports cross-platform operation. An arbitrary file deletion vulnerability exists in the SeaCMS backend. An attacker can exploit this vulnerability to delete arbitrary files on the web server...