1187 matches found
CVE-2024-44720
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component adminsafe.php...
CVE-2024-44721
SeaCMS v13.1 was discovered to a Server-Side Request Forgery SSRF via the url parameter at /adminreslib.php...
SeaCMS Cross-Site Scripting Vulnerability (CNVD-2024-38573)
SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML v...
SeaCMS cross-site scripting vulnerability (CNVD-2024-39583)
SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS version v13, which originates from a cross-site scripting vulnerability contained...
CVE-2024-44921
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...
CVE-2024-44921
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...
CVE-2024-44920
A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...
CVE-2024-44920
A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...
CVE-2024-44921
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...
PT-2024-31306 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A cross-site scripting XSS issue in the admin collect news.php component allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter. Recommendations: Fo...
CVE-2024-44920
A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...
CVE-2024-44921
SeaCMS v12.9 is affected by a SQL injection vulnerability in the id parameter of the /dmplayer/dmku/index.php?ac=del endpoint. The vulnerability’s CVSS 3.1 base score is 9.8 (CRITICAL) with NETWORK attack vector, no privileges required, and no user interaction. The impact is Confidentiality, Inte...
CVE-2024-44921
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del...
SeaCMS 安全漏洞
SeaCMS is a free, open source web content management system written in PHP by SeaCMS. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from a cross-site scripting vulnerability that can be exploited by an attacker to execute arbitrary web script or HTML v...
CVE-2024-44920
A cross-site scripting XSS vulnerability in the component admincollectnews.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter...
CVE-2024-44920
CVE-2024-44920 is a documented cross-site scripting (XSS) vulnerability in SeaCMS v12.9, affecting the component derive from the description: admin_collect_news.php. The vulnerability can be triggered by injecting a crafted payload into the siteurl parameter, enabling attackers to execute arbitra...
PT-2024-31307 · Seacms · Seacms
Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A SQL injection vulnerability was discovered in SeaCMS via the id parameter at the "/dmplayer/dmku/index.php?ac=del" endpoint. This issue allows for potential SQL injection attacks. Recommendations: For SeaCMS...
CVE-2024-44683
Seacms v13 is vulnerable to Cross Site Scripting XSS via admin-video.php...