14 matches found
CVE-2025-4257
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-4257
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-4257
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-4257 SeaCMS admin_pay.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-4257 SeaCMS admin_pay.php cross site scripting
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
SeaCMS 代码注入漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A code injection vulnerability exists in SeaCMS version 13.2, which stems from improper handling of the parameter cstatus in the file...
CVE-2025-4257: Improper Neutralization of Input During Web Page Generation
A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /adminpay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed t...
CVE-2025-25520
Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...
CVE-2025-25520
Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...
CVE-2025-25520
Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...
CVE-2025-25520
Versions of Seacms prior to 13.3 are vulnerable to an SQL Injection flaw located in the admin_pay.php file. This vulnerability allows for the improper neutralization of special elements used in SQL commands, potentially leading to unauthorized access or manipulation of the database. To resolve th...
CVE-2025-25520
Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...
CVE-2025-25520: Improper Neutralization of Special Elements used in an SQL Command
Seacms 13.3 is vulnerable to SQL Injection in adminpay.php...
SQL Injection Vulnerability in Ocean CMS ckey Parameter
Ocean CMS is an open source website builder. An SQL injection vulnerability exists in the adminpay.php page of the official version of Ocean CMS 6.46 utf-8. The lack of filtering of the 'ckey' parameter allows an attacker to exploit the vulnerability to obtain sensitive information about the...