PT-2025-52614

Name of the Vulnerable Software and Affected Versions SeaCMS versions up to 13.3 Description A SQL injection issue exists in SeaCMS. The issue is located in the admin video.php file, specifically through manipulation of the e id argument within an unknown function. This allows for remote...

EUVD-2024-41071

Malicious code in bioql PyPI...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

SeaCMS cross-site scripting vulnerability (CNVD-2024-39583)

SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version v13, which originates from a cross-site scripting vulnerability contained...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2024-44683

Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php. The CVE entry documents an XSS in SeaCMS v13 (admin-video.php) with a CVSS v3.1 base score 6.1 (MEDIUM). Exploitation details are not fully disclosed in the provided materials; CVSS suggests network access with user inter...

PT-2024-31210 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 13 Description: The issue is related to Cross Site Scripting XSS via the admin-video.php endpoint. This allows for potential malicious script execution. No information is provided about the estimated number of potentially...

CVE-2024-44683: Improper Neutralization of Input During Web Page Generation

Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

PT-2018-13763

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.64 Description The issue allows SQL Injection via the order parameter in the upload/admin/admin video.php endpoint. Recommendations For SeaCMS version 6.64, consider restricting access to the upload/admin/admin video.php...

PT-2018-13873

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.64 Description A security issue was found in the software. It is related to XSS that exists in the "admin video.php" file via certain parameters, including action, area, type, yuyan, jqtype, v isunion, v recycled, v ismoney, o...

PT-2018-13508

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue is related to a problem where an attacker can execute arbitrary code via the v content parameter in the admin video.php file, which is linked to the site name. Recommendations For SeaCMS version 6.61,...

PT-2018-12503

Name of the Vulnerable Software and Affected Versions SeaCMS version 6.61 Description The issue allows for remote code execution by inserting PHP code into a movie picture address, also referred to as v pic, in the /admin/admin video.php or /backend/admin video.php endpoint. This inserted code is...