6 matches found
CVE-2024-54880
1. Resumen del proyecto elemento| contenido| observación ---|---|--- Rango de penetración autorizado| http://192.168.88.141/| Prueba local Descarga del código fuente| https://www.seacms.net/SeaCMSV13.1installf.zip| Proyecto de código abierto Alcance de la vulnerabilidad| SeaCMSV13.1| 1...
CVE-2024-54880
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...
CVE-2024-54880
creationtimestamp| type| source ---|---|--- 2025-01-06 17:39:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113782629801086616 2025-01-06 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qj7fav525 2025-01-06 18:43:30+00:00| seen|...
CVE-2024-54880
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...
CVE-2024-54880
SeaCMS V13.1 is vulnerable to Incorrect Access Control due to a logic flaw. An unauthenticated attacker can exploit this vulnerability to register accounts in bulk . Proof-of-concept exploits have been published via Telegram. No specific remediation or patch version is provided in the documents.