Lucene search
+L

8 matches found

NVD
NVD
•added 2025/02/25 10:15 p.m.•22 views

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

6.5CVSS0.00303EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2025/02/25 12:00 a.m.•8 views

CVE-2025-25514: Improper Neutralization of Special Elements used in an SQL Command

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

6.5CVSS5.8AI score0.00303EPSS
SaveExploits1References1
Mend
Mend
•added 2025/02/25 12:00 a.m.•4 views

CVE-2025-25514

Seacms =13.3 is vulnerable to SQL Injection in admincollectnews.php...

6.9CVSS0.00303EPSS
SaveExploits1References1
NVD
NVD
•added 2024/09/03 12:15 p.m.•31 views

CVE-2024-44920

A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...

6.1CVSS0.00368EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2024/09/03 12:00 a.m.•33 views

CVE-2024-44920

A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...

0.00368EPSS
SaveExploits1References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/09/03 12:00 a.m.•10 views

CVE-2024-44920: Improper Neutralization of Input During Web Page Generation

A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...

6.1CVSS6AI score0.00368EPSS
SaveExploits1References1
Mend
Mend
•added 2024/09/03 12:00 a.m.•4 views

CVE-2024-44920

A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...

6.1CVSS0.00368EPSS
SaveExploits1References1
CVE
CVE
•added 2024/09/03 12:00 a.m.•66 views

CVE-2024-44920

CVE-2024-44920 is a documented cross-site scripting (XSS) vulnerability in SeaCMS v12.9, affecting the component derive from the description: admin_collect_news.php. The vulnerability can be triggered by injecting a crafted payload into the siteurl parameter, enabling attackers to execute arbitra...

6.1CVSS5.6AI score0.00368EPSS
SaveExploits1References1Affected Software1
Rows per page
Query Builder