Cross site scripting

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...

CVE-2018-12431

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...

CVE-2018-12431

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...

CVE-2018-12431

SeaCMS V6.61 is vulnerable to Cross‑Site Scripting via the site name parameter on adm1n/admin_config.php (system management page). The root cause is an XSS flaw in the site name input; impact is user‑visible script injection. The connected records confirm the vulnerability across multiple sources...

CVE-2018-12431

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...

SQL Injection Vulnerability in Ocean CMS

Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. Ocean CMS is vulnerable to SQL injection. An attacker can exploit the vulnerability to obtain sensitive database information...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

Cross site scripting

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

SeaCMS 6.61 has stored XSS in admincollect.php via the siteurl parameter...

CVE-2018-11583

CVE-2018-11583 affects SeaCMS 6.61, with a stored XSS in admin_collect.php via the siteurl parameter. Root cause per records is unescaped/sanitized input in siteurl leading to script injection. NVD metrics indicate confidentiality impact NONE and integrity impact PARTIAL (availability NONE); user...

Arbitrary File Deletion Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file deletion vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to arbitrarily delete files...

Arbitrary File Read Vulnerability in SeaCMS Version v6.6.1

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. An arbitrary file read vulnerability exists in SeaCMS version v6.6.1, which can be exploited by an attacker to read arbitrary files...

SeaCMS Cross-Site Scripting Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version 6.61. A remote attacker can exploit this vulnerability to inject arbitrary web...

SeaCMS system has an override access vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A code execution vulnerability exists in the SeaCMS system. Because the program does not effectively filter the data written to the write...

seacms前台一处鸡肋报错注入，绕过80sec，360webscan获取数据

...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

Code injection

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...

CVE-2017-17561

SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...