PT-2023-29794 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: An issue in the software allows an attacker to execute arbitrary commands via the admin safe.php component. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin safe.php component...

CVE-2023-44846

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

CVE-2023-44846

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

CVE-2023-44848

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component...

CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

CVE-2023-44846

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

CVE-2023-44848

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component...

CVE-2023-44847

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

Code injection

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

Design/Logic Flaw

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component...

Design/Logic Flaw

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin Weixin.php component...

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to be used to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v.12.8, which stems from a vulnerability that allows attackers to execute arbitrary cod...

CVE-2023-44848

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component...

CVE-2023-44848

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admintemplate.php component...

CVE-2023-44848

CVE-2023-44848 affects SeaCMS v12.8, where the admin_template.php component permits arbitrary code execution. CVSS 3.1 base score 8.1 (HIGH): Network, low complexity, privileges required LOW, user interaction NONE; impacts include HIGH on integrity and availability. Affected product/version and t...

CVE-2023-44846

SeaCMS v12.8 is affected by CVE-2023-44846 via the admin_notify.php component, allowing an attacker to execute arbitrary code. The vulnerability’s root cause is described as an arbitrary code execution path in admin_notify.php, leading to high impact (CVE metrics indicate HIGH severity). No concr...

CVE-2023-44846

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

CVE-2023-44846

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin notify.php component...

SeaCMS Security Vulnerability

SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version v.12.8, which stems from a vulnerability that allows attackers to execute arbitrary code via the...