Lucene search
+L

4 matches found

NVD
NVD
added 2025/01/06 6:15 p.m.23 views

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

9.1CVSS0.00926EPSS
SaveExploits1References1
CVE
CVE
added 2025/01/06 12:00 a.m.68 views

CVE-2024-54879

SeaCMS v13.1 is affected by an Incorrect Access Control flaw in the membership recharge logic, enabling any user to indefinitely recharge members. Root cause: a logical access-control weakness in the recharge functionality. Documented impact: potential unauthorized recharges; CVSS v3.1 base score...

9.1CVSS6.5AI score0.00926EPSS
SaveExploits1References1Affected Software1
Positive Technologies
Positive Technologies
added 2025/01/06 12:00 a.m.16 views

PT-2025-3082 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.1 Description: The issue is related to incorrect access control, allowing an attacker to exploit a logic flaw and enable any user to recharge members indefinitely. Recommendations: For SeaCMS version 13.1, consider restricti...

9.1CVSS6.8AI score0.00926EPSS
SaveExploits1References6
Cvelist
Cvelist
added 2025/01/06 12:00 a.m.27 views

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

0.00926EPSS
SaveExploits1References1
Rows per page
Query Builder