CVE-2023-2926

A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit...

Design/Logic Flaw

A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit...

CVE-2023-2926

CVE-2023-2926 concerns SeaCMS 11.6, specifically the Picture Upload Handler’s file member.php. The vulnerability arises from manipulation of the argument oldpic , which can cause a denial of service, with remote initiation and public disclosure of exploits. Multiple connected sources corroborate ...

CVE-2023-2926 SeaCMS Picture Upload member.php denial of service

A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the component Picture Upload Handler. The manipulation of the argument oldpic leads to denial of service. The attack may be initiated remotely. The exploit...

Deserialization of untrusted data

A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

CVE-2023-0960 SeaCMS Picture Management config.ftp.php deserialization

A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config.ftp.php of the component Picture Management. The manipulation leads to deserialization. The attack may be launched remotely. The exploit has been...

CVE-2023-0960

SeaCMS 11.6’s Picture Management module contains a deserialization vulnerability in the /data/config.ftp.php path that can be triggered remotely. Public exploit details exist, and the issue affects the specified file/functionality rather than a generic component. No official patch/fix is document...

PT-2022-18381 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: Seacms version 11.6 Description: A remote code execution RCE issue was discovered in the /admin/weixin.php component. Recommendations: For Seacms version 11.6, consider restricting access to the /admin/weixin.php component until a patch is...