CVE-2018-17062

An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...

CVE-2018-17062

SeaCMS 6.64 contains a cross-site scripting (XSS) vulnerability in admin_video.php exploitable via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameters. The issue is documented across multiple sources (NVD CVE-2018-17062, CNVD-2018-19743, CVELIST, PRION) ...

CVE-2018-17062

An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...

CVE-2018-17062: Improper Neutralization of Input During Web Page Generation

An issue was discovered in SeaCMS 6.64. XSS exists in adminvideo.php via the action, area, type, yuyan, jqtype, visunion, vrecycled, vismoney, or vispsd parameter...

CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

Cross site scripting

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16348

SeaCMS v6.61 suffers a cross-site scripting (XSS) vulnerability in admin_video.php via the v_content parameter related to the site name. According to CNVD-2018-19071, remote attackers can exploit this to inject arbitrary web script or HTML. There is no remediation or patch information provided in...

CVE-2018-16348: Improper Neutralization of Input During Web Page Generation

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

Cross site request forgery (csrf)

SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address aka vpic to /admin/adminvideo.php aka /backend/adminvideo.php. The code is executed by visiting /details/index.php. This can also be exploited through CSRF...