PT-2025-19805 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: A SQL injection issue was discovered in the admin manager.php component. Recommendations: For SeaCMS version 13.3, update to a version that fixes the SQL injection vulnerability in the admin manager.php...

PT-2021-11583

Name of the Vulnerable Software and Affected Versions: SeaCMS version 10.7 Description: A Cross Site Request Forgery CSRF issue exists in the admin manager.php file, which could allow a malicious user to add an admin account. This could potentially lead to unauthorized access and control of the...

PT-2018-15363

Name of the Vulnerable Software and Affected Versions DouPHP version 1.5 Description The issue allows for a CSRF attack via the "upload/admin/manager.php?rec=insert" endpoint to add an administrator account. Recommendations For DouPHP version 1.5, consider implementing CSRF protection measures to...

CVE-2018-20419: Cross-Site Request Forgery (CSRF)

DouCo DouPHP 1.5 has upload/admin/manager.php?rec=insert CSRF to add an administrator account...

PT-2018-11828

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description A CSRF issue allows adding a user account via the "adm1n/admin manager.php?action=add" endpoint. Recommendations For SeaCMS version 6.61, consider disabling the user account addition functionality in the...

PT-2018-11827

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description A CSRF issue allows adding an admin account via the "adm1n/admin manager.php?action=save&id=2" endpoint. Recommendations For SeaCMS version 6.61, update to a newer version that contains a fix for this issue, or ...