Server side request forgery (ssrf)

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

CVE-2018-16445

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

Sql injection

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

CVE-2018-16445

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

CVE-2018-16445

SeaCMS ≤6.61 is affected by an SQL injection in adm1n/admin_topic_vod.php via the tid parameter. The root cause is an unsafely interpolated tid input leading to query manipulation, enabling unauthorized data access or modification. Affected product/line: SeaCMS (Ocean CMS). The CVSS metrics indic...

SeaCMS Server-Side Request Forgery Vulnerability

SeaCMS Ocean CMS is a professional open source free PHP film and television system. There is a server-side request forgery vulnerability in adm1n/adminreslib.php in 6.61 and earlier versions of SeaCMS, which can be exploited by an attacker through the url parameter to conduct a server-side reques...

PT-2018-13571

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description An issue was discovered in SeaCMS, where the adm1n/admin reslib.php file has a Server-Side Request Forgery SSRF vulnerability via the url parameter. Recommendations For SeaCMS version 6.61, consider restricting...

CVE-2018-16444: Server-Side Request Forgery (SSRF)

An issue was discovered in SeaCMS 6.61. adm1n/adminreslib.php has SSRF via the url parameter...

CVE-2018-16445: Improper Neutralization of Special Elements used in an SQL Command

An issue was discovered in SeaCMS through 6.61. SQL injection exists via the tid parameter in an adm1n/admintopicvod.php request...

PT-2018-13573

Name of the Vulnerable Software and Affected Versions SeaCMS versions through 6.61 Description An issue in SeaCMS allows remote attackers to delete arbitrary files via directory traversal sequences in the bakfiles parameter in the 'adm1n/admin database.php' endpoint. This can lead to the product...

PT-2018-13572

Name of the Vulnerable Software and Affected Versions SeaCMS versions prior to 6.62 Description An issue exists in the software, allowing SQL injection via the tid parameter in an "adm1n/admin topic vod.php" request. Recommendations For versions prior to 6.62, update to version 6.62 or later to...

CVE-2018-13445

SeaCMS 6.61 is affected by a CSRF vulnerability that allows an attacker to add a user account via adm1n/admin_manager.php?action=add. The root cause is CSRF in the admin interface; impact indicates high severity (NVD CVSS3: 8.8) with network origin, no authentication, and high confidentiality, in...

CVE-2018-13445: Cross-Site Request Forgery (CSRF)

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add a user account via adm1n/adminmanager.php?action=add...

PT-2018-11828

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description A CSRF issue allows adding a user account via the "adm1n/admin manager.php?action=add" endpoint. Recommendations For SeaCMS version 6.61, consider disabling the user account addition functionality in the...

CVE-2018-13444: Cross-Site Request Forgery (CSRF)

An issue was discovered in SeaCMS 6.61. There is a CSRF vulnerability that can add an admin account via adm1n/adminmanager.php?action=save&id=2...

CVE-2018-12431: Improper Neutralization of Input During Web Page Generation

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/adminconfig.php page aka a system management page...

PT-2018-11167

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to a Cross-Site Scripting XSS problem. It occurs via the site name parameter on the "adm1n/admin config.php" page, which is a system management page. Recommendations For SeaCMS version 6.61,...

PHP 5.2.3 - PHP_win32sti Local Buffer Overflow (2)

PHP 5.2.3 - PHPwin32sti Local Buffer Overflow 2 "adm1n" password="netjackal" $SC= "\xEB\x19\x5A\x31\xC0\x50\x88\x42\x52\x52\xBB\x6D\x13\x86". "\x7C\xFF\xD3\xBB\xDA\xCD\x81\x7C\x31\xC0\x50\xFF\xD3\xE8". "\xE2\xFF\xFF\xFF\x63\x6D\x64\x2E\x65\x78\x65\x20\x2F\x63"...