1441 matches found
SQL Injection Vulnerability in Seacms v9.9 Backend ad***_te***.php File
SeaCMS is a video-on-demand system based on PHP+MySql technology. A SQL injection vulnerability exists in the adte.php file in the background of Seacms v9.9. An attacker can exploit the vulnerability to obtain sensitive database information...
Arbitrary Code Execution Vulnerabilities in SeaCmsV9.2 Backend
SeaCMS is a video-on-demand system based on PHP+MySql technology. SeaCmsV9.2 background arbitrary code execution vulnerability, SeaCMS background database backup, due to incomplete data filtering leads to arbitrary code execution, the attack can be exploited to obtain server privileges...
Design/Logic Flaw
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
CVE-2019-8418
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
CVE-2019-8418
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
CVE-2019-8418
CVE-2019-8418 affects SeaCMS 7.2 and is triggered by mishandling requests to member.php?mod=repsw4. The NVD record lists CVSS v3 as 8.8 (HIGH) with network attack, low complexity, and privileges required as LOW; impacts are HIGH for confidentiality, integrity, and availability. The description al...
PT-2019-19021
Name of the Vulnerable Software and Affected Versions SeaCMS version 7.2 Description The issue is related to how SeaCMS handles requests to the "member.php?mod=repsw4" endpoint. Recommendations For SeaCMS version 7.2, consider restricting access to the "member.php?mod=repsw4" endpoint until a pat...
CVE-2019-8418: Undefined Security Weakness
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests...
Seacms frontend me***.php file has SQL injection vulnerability
SeaCMS is a video-on-demand system based on PHP+MySql technology. A SQL injection vulnerability exists in the Seacms frontend me.php file. An attacker can exploit the vulnerability to obtain sensitive information from the database...
Arbitrary Password Reset Vulnerability in SeaCMS
SeaCMS is a free and open source web content management system written in PHP. The system has been designed primarily to manage video-on-demand resources. SeaCMS suffers from an arbitrary password reset vulnerability that can be exploited by an attacker to reset passwords...
Code Execution Vulnerability in Ocean Cms
Ocean CMS seacms is a video-on-demand system designed for webmasters with different needs. A code execution vulnerability exists in ocean cms. An attacker can exploit this vulnerability to execute code...
SeaCMS cross-site scripting vulnerability (CNVD-2019-08330)
SeaCMS Ocean CMS is a professional open source free PHP film and television system. A stored cross-site scripting vulnerability exists in SeaCMS 6.6.4, which can be exploited by an attacker during a password change via the member.php?action=chgpwdsubmit email parameter...
CVE-2018-19349
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
Sql injection
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...
CVE-2018-19350
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...
Cross site scripting
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...
CVE-2018-19350
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element...
CVE-2018-19349
In SeaCMS v6.64, there is SQL injection via the adminmakehtml.php topic parameter because of mishandling in include/mkhtml.func.php...