CVE-2024-6416

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...

CVE-2024-6416

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...

CVE-2024-6416

SeaCMS 12.9 is affected by a remote SQL injection vulnerability in /js/player/dmplayer/dmku/?ac=edit, caused by manipulating the cid parameter (example payload: (select(0)from(select(sleep(10)))v)). Multiple trusted sources corroborate that this vulnerability can be exploited remotely and that th...

CVE-2024-6416 SeaCMS sql injection

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...

CVE-2024-6416 SeaCMS sql injection

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input select0fromselectsleep10v leads to sql injection. The attack ca...

SeaCMS SQL Injection Vulnerability

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which stems from the fact that manipulation of the parameter cid using inpu...

PT-2024-37609 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: A critical issue has been found in SeaCMS, affecting an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the cid argument with a specific input leads to SQL injection...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

SeaCMS Security Vulnerability

SeaCMS is a free, open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 12.9. An attacker can exploit the vulnerability to delete files via admintemplate.php...

CVE-2024-31611

SeaCMS 12.9 is affected by CVE-2024-31611 due to a file deletion vulnerability in admin_template.php. The CVSS v3.1 base score is 9.1 (CRITICAL) with Network access, Low complexity, NONE privileges, no user interaction, and impacts to integrity and availability (I:H, A:H). The connected sources c...

PT-2024-24152 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue is related to a file deletion vulnerability. It can be exploited via the admin template.php file. Recommendations: For SeaCMS version 12.9, consider restricting access to the admin template.php file...

CVE-2024-31611

SeaCMS 12.9 has a file deletion vulnerability via admintemplate.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 12.9, which stems from allowing remote attackers to execute arbitrary code via admin notify.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

CVE-2024-30565

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php...

PT-2024-23493 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: An issue was discovered that allows remote attackers to execute arbitrary code via the admin notify.php endpoint. Recommendations: For SeaCMS version 12.9, consider disabling access to the admin notify.php...