2 matches found
CVE-2018-16822
SeaCMS 6.64 allows SQL Injection via the upload/admin/adminvideo.php order parameter...
9.8CVSS9.9AI score0.01189EPSS
SaveExploits1References2
CVE-2018-16822
SeaCMS 6.64 contains a SQL Injection in the upload/admin/admin_video.php order parameter. The underlying issue is improper handling/validation of the order parameter, enabling remote attackers to craft SQL commands. Severity is high (CVSS v3.0: CRITICAL; AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H). The ...
9.8CVSS9.8AI score0.01189EPSS
SaveExploits1References2Affected Software1
20