61 matches found
Arbitrary file deletion
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...
Arbitrary file deletion
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminsmtp.php...
Arbitrary file deletion
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...
CVE-2023-44169
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminnotify.php...
CVE-2023-44172
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...
CVE-2023-44170
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...
CVE-2023-44169
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminnotify.php...
CVE-2023-43216
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...
CVE-2023-43216
SeaCMS v12.9 contains an arbitrary file write vulnerability in the admin_ip.php component. Affected: SeaCMS 12.9; vulnerability type: arbitrary file write (root cause not further clarified in the provided documents). Impact indicators from CVSS 3.1: Critical (9.8), Network attack vector, no privi...
CVE-2023-44169
SeaCMS v12.9 is affected by CVE-2023-44169, a high-severity arbitrary file write vulnerability in the admin_notify.php component. The CVSSv3.1 base score is 9.8 (CRITICAL) with Network attack vector, no privileges required, and no user interaction. Impact spans confidentiality, integrity, and ava...
CVE-2023-44171
CVE-2023-44171 affects SeaCMS v12.9, with an arbitrary file write vulnerability in the admin_smtp.php component. The advisory notes a network-accessible, unauthenticated flaw (CVSS: 9.8, HIGH impact; Confidentiality/Integrity/Availability all High). Exploitation details are not provided in the pr...
CVE-2023-43216
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...
CVE-2023-44172: Improper Limitation of a Pathname to a Restricted Directory
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...
CVE-2023-44169: Improper Limitation of a Pathname to a Restricted Directory
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminnotify.php...
CVE-2023-44171: Improper Limitation of a Pathname to a Restricted Directory
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminsmtp.php...
CVE-2023-44172
SeaCMS 12.9 contains an arbitrary file write vulnerability in the admin_weixin.php component. The CVE-2023-44172 entry is supported by multiple sources (NVD, Red Hat, CNNVD, cve.org/etc.), citing a high-severity issue with CVSS 3.1 base score 9.8 (CRITICAL) and a network-exposed, no-auth, high-im...
CVE-2023-44170
CVE-2023-44170 affects SeaCMS v12.9, via the admin_ping.php component, enabling an arbitrary file write. The issue is classified with CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, low complexity, no privileges required, and requires no user interaction; impact to confidentiality,...
CVE-2023-44171
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminsmtp.php...