CVE-2024-30565

SeaCMS 12.9 is affected by a remote code execution vulnerability exploitable via the admin notify.php endpoint. Public records confirm impact on SeaCMS and mention arbitrary code execution through this endpoint, but the provided documents do not specify a concrete exploit vector, affected version...

SeaCMS SQL Injection Vulnerability (CNVD-2024-26090)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which can be exploited by an attacker to view, add, modify, or delete information...

CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php...

CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php...

CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php...

CVE-2024-29275

SeaCMS 12.9 is affected by a SQL injection in the id parameter of class.php, enabling remote unauthenticated attackers to execute arbitrary code and access sensitive data. This vulnerability has a CVSS-like impact of high confidentiality, integrity, and availability. Remediation per PT-2024-22846...

CVE-2024-29275

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php...

SeaCMS 安全漏洞

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A SQL injection vulnerability exists in SeaCMS version 12.9, which can be exploited by an attacker to view, add, modify, or delete information...

PT-2024-22846 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 12.9 Description: The issue allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. This enables attackers to potentially access and manipulate...

SeaCMS Cross-Site Scripting Vulnerability (CNVD-2024-06149)

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS v12.8, which stems from the lack of effective filtering and escaping of user-supplied da...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-46987

SeaCMS v12.9 was discovered to contain a remote code execution RCE vulnerability via the component /augap/adminip.php...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-46987

SeaCMS v12.9 was discovered to contain a remote code execution RCE vulnerability via the component /augap/adminip.php...

CVE-2023-50470

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

CVE-2023-46987

SeaCMS v12.9 was discovered to contain a remote code execution RCE vulnerability via the component /augap/adminip.php...

Cross site scripting

A cross-site scripting XSS vulnerability in the component admin Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload...

Remote code execution

SeaCMS v12.9 was discovered to contain a remote code execution RCE vulnerability via the component /augap/adminip.php...

SeaCMS 安全漏洞

SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. A cross-site scripting vulnerability exists in SeaCMS v12.8, which stems from the lack of effective filtering and escaping of user-supplied da...

PT-2023-30283

Name of the Vulnerable Software and Affected Versions SeaCMS version 12.9 Description A remote code execution RCE issue was discovered in SeaCMS via the component /augap/adminip.php. This allows for potential code execution by remote attackers. Recommendations For SeaCMS version 12.9, consider...