CVE-2025-3792 SeaCMS admin_link.php sql injection

A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /adminlink.php?action=delall. The manipulation of the argument eid leads to sql injection. The attack may be initiated remotely. The exploit has been...

CVE-2025-3792

SeaCMS prior to version 13.4/13.3 is affected by a SQL injection in admin_link.php?action=delall via manipulation of the e_id parameter. The vulnerability is invoked remotely and exploitation has been publicly disclosed. Affected product: SeaCMS (≤13.3; some sources reference ≤13.4). Root cause d...

PT-2025-17265 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS versions prior to 13.4 Description: A critical vulnerability exists in SeaCMS. The issue affects unknown processing within the /admin link.php?action=delall file. Manipulation of the e id argument results in a SQL injection. The attack...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

PT-2025-14790 · Seacms · Seacms

Name of the Vulnerable Software and Affected Versions: SeaCMS version 13.3 Description: The issue is related to a SQL injection vulnerability in the admin tempvideo.php component. Recommendations: For SeaCMS version 13.3, consider disabling access to the admin tempvideo.php component until a patc...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admintempvideo.php...

SeaCMS 安全漏洞

SeaCMS is a free, open source web content management system written in PHP by SeaCMS, Inc. The system is primarily designed to manage video-on-demand resources. A security vulnerability exists in SeaCMS version 13.3, which stems from a SQL injection vulnerability in the admintempvideo.php compone...

CVE-2025-29647

SeaCMS v13.3 contains a SQL injection vulnerability in the admin_tempvideo.php component. Root cause: improper handling of input in that PHP file leads to unauthenticated, remote exploitation with full impact on confidentiality, integrity, and availability (per CVSS 3.1 score 9.8). Exploitation a...

CVE-2025-25797

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminsmtp.php...

CVE-2025-25793

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminnotify.php...

CVE-2025-25799

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafe.php...

CVE-2025-25802

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminip.php...

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component admintemplate.php...

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the isopen parameter at adminweixin.php...

CVE-2025-25813

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminfiles.php...

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution RCE vulnerability via the component adminping.php...

CVE-2025-25800

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the filegetcontents function at adminsafefile.php...