CVE-2024-39027

SeaCMS v12.9 exposes an unauthorized SQL injection via the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, leading to leakage of sensitive database information. This vulnerability is documented across multiple sources (NVD/Red Hat/CNNVD/CVE records). Affected software is SeaCMS 12.9;...