EUVD-2025-4262

Malicious code in bioql PyPI...

EUVD-2024-52774

Malicious code in bioql PyPI...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

PT-2025-7802

Name of the Vulnerable Software and Affected Versions SeaCMS versions 13.2 and earlier Description The issue allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component. This enables the attacker to perform unauthorized actions on the system...

CVE-2025-22974: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2024-55461

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

CVE-2024-55461

SeaCMS versions

CVE-2024-55461: Improper Neutralization of Special Elements used in a Command

SeaCMS =13.0 is vulnerable to command execution in phome.php via the function EbakRepPathFiletext...

SeaCMS security vulnerabilities

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.0 and earlier, which stems from the function EbakRepPathFiletext in phome.php that...

PT-2024-36521 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions =13.0 Description: The issue allows for command execution in the phome.php file through the Ebak RepPathFiletext function. This enables an attacker to execute commands on the system. Recommendations: For SeaCMS versions =13.0,...

CVE-2024-10291

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-10291 ZZCMS phome.php Ebak_DotranExecutSQL sql injection

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-10291 ZZCMS phome.php Ebak_DotranExecutSQL sql injection

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

CVE-2024-10291: Improper Neutralization of Special Elements used in an SQL Command

A vulnerability has been found in ZZCMS 2023 and classified as critical. This vulnerability affects the function EbakDoExecSQL/EbakDotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the argument phome leads to sql injection. The attack can be initiated remotely. The explo...

PT-2024-16164

Name of the Vulnerable Software and Affected Versions ZZCMS version 2023 Description A critical issue has been found, affecting the function Ebak DoExecSQL/Ebak DotranExecutSQL of the file 3/Ebak5.1/upload/phome.php. The manipulation of the phome argument leads to SQL injection. The attack can be...