CVE-2024-54880

I. Project overview item| content| remark ---|---|--- Authorized penetration range| http://192.168.88.141/| Local test Source code download| https://www.seacms.net/SeaCMSV13.1installf.zip| Open source project Scope of vulnerability| SeaCMSV13.1| I. Vulnerability description 1. Logic vulnerability...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54880

creationtimestamp| type| source ---|---|--- 2025-01-06 17:39:07+00:00| seen| https://infosec.exchange/users/cve/statuses/113782629801086616 2025-01-06 18:15:52+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lf3qj7fav525 2025-01-06 18:43:30+00:00| seen|...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control due to a logic flaw. An unauthenticated attacker can exploit this vulnerability to register accounts in bulk . Proof-of-concept exploits have been published via Telegram. No specific remediation or patch version is provided in the documents.