4 matches found
Sql injection
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
CVE-2018-19349
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
CVE-2018-19349: Improper Neutralization of Special Elements used in an SQL Command
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
PT-2018-14933
Name of the Vulnerable Software and Affected Versions SeaCMS version 6.64 Description The issue is related to SQL injection due to mishandling in the include/mkhtml.func.php file. This occurs via the topic parameter in the admin makehtml.php file. Recommendations For SeaCMS version 6.64, consider...