CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

Cross site scripting

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16348

SeaCMS V6.61 has XSS via the adminvideo.php vcontent parameter, related to the site name...

CVE-2018-16348

SeaCMS v6.61 suffers a cross-site scripting (XSS) vulnerability in admin_video.php via the v_content parameter related to the site name. According to CNVD-2018-19071, remote attackers can exploit this to inject arbitrary web script or HTML. There is no remediation or patch information provided in...

Cross site request forgery (csrf)

SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address aka vpic to /admin/adminvideo.php aka /backend/adminvideo.php. The code is executed by visiting /details/index.php. This can also be exploited through CSRF...