26 matches found
CVE-2023-44170
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...
CVE-2023-44170
CVE-2023-44170 affects SeaCMS v12.9, via the admin_ping.php component, enabling an arbitrary file write. The issue is classified with CVSS 3.1 base score 9.8 (CRITICAL) with network attack vector, low complexity, no privileges required, and requires no user interaction; impact to confidentiality,...
CVE-2017-17561
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...
CVE-2017-17561
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...
Code injection
SeaCMS 6.56 allows remote authenticated administrators to execute arbitrary PHP code via a crafted token field to admin/adminping.php, which interacts with data/admin/ping.php...