CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

Sql injection

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

SQL Injection in SEACMS v210530 2021-05-30 allows remote attackers to execute arbitrary code via the component "adminajax.php?action=checkrepeat&vname="...

CVE-2021-37358

CVE-2021-37358 affects SEACMS v210530. Multiple sources describe a SQL Injection via the admin_ajax.php?action=checkrepeat&v_name parameter, enabling remote attackers to execute arbitrary code. NVD lists high to critical severity (CVSS v2: 7.5/10; CVSS v3.1: 9.8/10) with network access, no authen...

SeaCMS SQL注入漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SEACMS v210530, which stems from a lack of validation of externally entered SQL statements in database-based...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

Cross site scripting

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2021-29313

CVE-2021-29313 affects SeaCMS 12.6, with a cross-site scripting (XSS) flaw exploitable via the (1) v_company and (2) v_tvs parameters in /admin_video.php. The NVD entry lists CVSS2/3 base scores of 4.3 (MEDIUM) and 6.1 (MEDIUM) respectively, reflecting network attack vector, no authentication, an...

CVE-2021-29313

Cross Site Scripting XSS vulnerability exists in SeaCMS 12.6 via the 1 vcompany and 2 vtvs parameters in /adminvideo.php,...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

Cross site request forgery (csrf)

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

CVE-2020-28846

Cross Site Request Forgery CSRF vulnerability exists in SeaCMS 10.7 in adminmanager.php, which could let a malicious user add an admin account...

CVE-2020-28846

CVE-2020-28846 affects SeaCMS 10.7 with a Cross‑Site Request Forgery vulnerability in admin_manager.php, which could allow a malicious user to add an administrator account. The connected records consistently describe the CSRF flaw in SeaCMS 10.7 and its impact but do not provide specific technica...

SeaCMS 跨站请求伪造漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A cross-site request forgery vulnerability exists in adminmanager.php in SeaCMS 10.7, which allows a malicious user to add an administrator account...

SeaCMS 跨站脚本漏洞

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS, which stems from a cross-site scripting XSS vulnerability in SeaCMS 12.6 via the 1 v company and 2 v tvs...

SeaCMS suffers from SQL injection vulnerabilities (CNVD-2021-54018)

SeaCMS is a PHP MYSQL-based architecture, professional open source free PHP film and television system, can be cross-platform operation of the web content management system. SeaCMS SQL injection vulnerability , attackers can exploit the vulnerability to obtain sensitive database information...

SQL Injection Vulnerability in SEACMS (CNVD-2021-51344)

SEACMS is a web content management system based on PHP MYSQL architecture and can run across platforms. SEACMS has a SQL injection vulnerability that can be exploited by attackers to obtain sensitive database information...