Remote code execution

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

CVE-2022-48093 affects SeaCMS/Seacms v12.7, with a remote code execution (RCE) vulnerability exploitable via the ip parameter in the admin_ip.php endpoint. Multiple connected sources (NVD, Red Hat advisory, CNNVD, CVE listings, etc.) confirm the issue and its impact, all citing the same vector in...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

CVE-2022-48093

Seacms v12.7 was discovered to contain a remote code execution RCE vulnerability via the ip parameter at admin ip.php...

SeaCMS Remote Code Execution Vulnerability (CNVD-2019-08329)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A remote code execution vulnerability exists in SeaCMS version 6.61, which can be exploited by remote attackers to execute code by writing PHP...

CVE-2018-14910

SeaCMS v6.61 is vulnerable to Remote Code Execution. An attacker can place PHP code via an allowed IP address (ip) that targets /admin/admin_ip.php (also reachable as /adm1n/admin_ip.php). The payload is executed when an affected endpoint is accessed (adm1n/admin_ip.php or data/admin/ip.php), ena...