CVE-2023-43216: Improper Limitation of a Pathname to a Restricted Directory

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...

CVE-2023-43216

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...

CVE-2023-43216

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...

CVE-2023-43216

SeaCMS v12.9 contains an arbitrary file write vulnerability in the admin_ip.php component. Affected: SeaCMS 12.9; vulnerability type: arbitrary file write (root cause not further clarified in the provided documents). Impact indicators from CVSS 3.1: Critical (9.8), Network attack vector, no privi...

CVE-2023-43216

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

Remote code execution

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093: Improper Control of Generation of Code

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

CVE-2022-48093 affects SeaCMS/Seacms v12.7, with a remote code execution (RCE) vulnerability exploitable via the ip parameter in the admin_ip.php endpoint. Multiple connected sources (NVD, Red Hat advisory, CNNVD, CVE listings, etc.) confirm the issue and its impact, all citing the same vector in...

SeaCMS Remote Code Execution Vulnerability (CNVD-2019-08329)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A remote code execution vulnerability exists in SeaCMS version 6.61, which can be exploited by remote attackers to execute code by writing PHP...

CVE-2018-14910

SeaCMS v6.61 is vulnerable to Remote Code Execution. An attacker can place PHP code via an allowed IP address (ip) that targets /admin/admin_ip.php (also reachable as /adm1n/admin_ip.php). The payload is executed when an affected endpoint is accessed (adm1n/admin_ip.php or data/admin/ip.php), ena...

CVE-2018-14910: Improper Control of Generation of Code

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address aka ip to /admin/adminip.php aka /adm1n/adminip.php. The code is executed by visiting adm1n/adminip.php or data/admin/ip.php. This can also be exploited through CSRF...