Lucene search
+L

6 matches found

NVD
NVD
•added 2024/08/20 4:15 p.m.•18 views

CVE-2024-42598

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admineditplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execut...

6.7CVSS0.01223EPSS
SaveExploits1References2
OSV
OSV
•added 2024/08/20 4:15 p.m.•9 views

CVE-2024-42598

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admineditplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execut...

6.7CVSS6.6AI score0.01223EPSS
SaveExploits1References2
CVE
CVE
•added 2024/08/20 12:00 a.m.•76 views

CVE-2024-42598

SeaCMS version 13.0 is affected by a remote code execution (RCE) vulnerability within the admin_editplayer.php file. Although the system imposes restrictions on edited files, an authenticated attacker can bypass these restrictions to write malicious code, leading to arbitrary command execution an...

6.7CVSS8.2AI score0.01223EPSS
SaveExploits1References2Affected Software1
Vulnrichment
Vulnrichment
•added 2024/08/20 12:00 a.m.•12 views

CVE-2024-42598

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admineditplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execut...

8.7AI score0.01223EPSS
SaveExploits1References2
Cvelist
Cvelist
•added 2024/08/20 12:00 a.m.•29 views

CVE-2024-42598

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admineditplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execut...

0.01223EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/08/20 12:00 a.m.•1 views

CVE-2024-42598: Improper Control of Generation of Code

SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admineditplayer.php imposes restrictions on edited files, attackers can still bypass these restrictions and write code, allowing authenticated attackers to exploit the vulnerability to execut...

6.7CVSS6.8AI score0.01223EPSS
SaveExploits1References1
Rows per page
Query Builder