9018 matches found
SeaCMS Security Vulnerability
SeaCMS is a free and open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version V12.9, which is caused by an arbitrary file write vulnerability in adminweixin.php...
Amazon Linux 2 : mono (ALASMONO-2023-001)
It is, therefore, affected by a vulnerability as referenced in the ALAS2MONO-2023-001 advisory. SharpZipLib or ziplib is a Zip, GZip, Tar and BZip2 library. Prior to version 1.3.3, a TAR file entry ../evil.txt may be extracted in the parent directory of destFolder. This leads to arbitrary file...
PT-2023-28733 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. This vulnerability is present in the component admin ip.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin ip.p...
PT-2023-29143 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. It affects the component admin weixin.php, allowing for potential unauthorized file modifications. Recommendations: For SeaCMS version 12.9,...
PT-2023-29141 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. This vulnerability is present in the admin ping.php component. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin...
CVE-2023-44169
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminnotify.php...
CVE-2023-44169
SeaCMS v12.9 is affected by CVE-2023-44169, a high-severity arbitrary file write vulnerability in the admin_notify.php component. The CVSSv3.1 base score is 9.8 (CRITICAL) with Network attack vector, no privileges required, and no user interaction. Impact spans confidentiality, integrity, and ava...
CVE-2023-43216
SeaCMS v12.9 contains an arbitrary file write vulnerability in the admin_ip.php component. Affected: SeaCMS 12.9; vulnerability type: arbitrary file write (root cause not further clarified in the provided documents). Impact indicators from CVSS 3.1: Critical (9.8), Network attack vector, no privi...
CVE-2023-44170
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminping.php...
CVE-2023-43216
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...
CVE-2023-44172
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...
PT-2023-29142 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. It affects the component admin smtp.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin smtp.php component until...
CVE-2023-44172
SeaCMS 12.9 contains an arbitrary file write vulnerability in the admin_weixin.php component. The CVE-2023-44172 entry is supported by multiple sources (NVD, Red Hat, CNNVD, cve.org/etc.), citing a high-severity issue with CVSS 3.1 base score 9.8 (CRITICAL) and a network-exposed, no-auth, high-im...
CVE-2023-44171
CVE-2023-44171 affects SeaCMS v12.9, with an arbitrary file write vulnerability in the admin_smtp.php component. The advisory notes a network-accessible, unauthenticated flaw (CVSS: 9.8, HIGH impact; Confidentiality/Integrity/Availability all High). Exploitation details are not provided in the pr...
CVE-2023-43216
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminip.php...
CVE-2023-44169
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminnotify.php...
PT-2023-29139 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to an arbitrary file write vulnerability. This vulnerability is present in the component admin notify.php. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin...
CVE-2023-44172
SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component adminweixin.php...