CVE-2025-25516

CVE-2025-25516 affects SeaCMS

CVE-2025-25514

Seacms

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component...

CVE-2025-25513

SeaCMS

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.2 that stems from the DoTranExecSql parameter not being handled correctly, which...

CVE-2025-22974

CVE-2025-22974 exposes a SQL injection in SeaCMS (versions 13.2 and earlier) via the DoTranExecSql parameter in phome.php, enabling a remote attacker to execute arbitrary code. The issue is tied to improper handling of the DoTranExecSql input, as described across multiple sources (NVD/NIST, Red H...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3 and earlier versions that stems from adminmembers.php not being handled correctly...

CVE-2025-25513

Seacms =13.3 is vulnerable to SQL Injection in adminmembers.php...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk...

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.1, which stems from vulnerability to false access control attacks, leading to a log...

CVE-2024-54879

SeaCMS v13.1 is affected by an Incorrect Access Control flaw in the membership recharge logic, enabling any user to indefinitely recharge members. Root cause: a logical access-control weakness in the recharge functionality. Documented impact: potential unauthorized recharges; CVSS v3.1 base score...