Lucene search
K
Database
Vendors
Products
Timeline
Vulnerabilities
Perimeter Scanner
Scanning
Projects
Scanner
Agent Scanning
API Scanning
Manual Audit
Email
Webhook
Resources
Documents
Blog
Glossary
FAQ
Plugins
Pricing
Contacts
About Us
Partners
Branding Guideline
Settings
Sign in
SeacmsSeacms

31 matches found

CVE
CVE•added 2025/02/24 10:15 p.m.•71 views

CVE-2025-25513

Seacms

9.8CVSS8.3AI score0.00122EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•64 views

CVE-2025-25514

Seacms

6.5CVSS8.1AI score0.00034EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•60 views

CVE-2025-25796

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/05/05 10:15 p.m.•59 views

CVE-2025-44071

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component phomebak.php. This vulnerability allows attackers to execute arbitrary code via a crafted request.

9.8CVSS8.9AI score0.00549EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•58 views

CVE-2025-25517

Seacms

9.8CVSS7.6AI score0.00122EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•58 views

CVE-2025-25799

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php.

6CVSS7AI score0.0002EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•57 views

CVE-2025-25516

Seacms

9.8CVSS8.3AI score0.00122EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•57 views

CVE-2025-25520

Seacms

9.8CVSS8.1AI score0.00122EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•57 views

CVE-2025-25793

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•57 views

CVE-2025-25802

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/02/24 11:15 p.m.•56 views

CVE-2025-22974

SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phome.php component.

9.8CVSS9AI score0.00311EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•56 views

CVE-2025-25521

Seacms

9.8CVSS8.3AI score0.00122EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•56 views

CVE-2025-25797

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/05/05 10:15 p.m.•56 views

CVE-2025-44072

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_manager.php.

9.8CVSS8.3AI score0.00049EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•55 views

CVE-2025-25519

Seacms

9.8CVSS8AI score0.00122EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•55 views

CVE-2025-25794

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•54 views

CVE-2025-25813

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php.

5.1CVSS8AI score0.0006EPSS
CVE
CVE•added 2025/04/19 7:15 a.m.•52 views

CVE-2025-3797

A vulnerability classified as critical was found in SeaCMS up to 13.3. This vulnerability affects unknown code of the file /admin_topic.php?action=delall. The manipulation of the argument e_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public...

7.2CVSS5.3AI score0.00035EPSS
CVE
CVE•added 2025/05/06 9:16 p.m.•51 views

CVE-2025-44073

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_comment_news.php.

9.8CVSS7.9AI score0.00049EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•48 views

CVE-2025-25792

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php.

4.4CVSS8AI score0.00042EPSS
CVE
CVE•added 2025/04/18 3:15 p.m.•48 views

CVE-2025-3792

A vulnerability, which was classified as critical, has been found in SeaCMS up to 13.3. This issue affects some unknown processing of the file /admin_link.php?action=delall. The manipulation of the argument e_id leads to sql injection. The attack may be initiated remotely. The exploit has been disc...

7.2CVSS5.2AI score0.00035EPSS
CVE
CVE•added 2025/05/05 1:15 a.m.•48 views

CVE-2025-4256

A vulnerability classified as problematic was found in SeaCMS 13.2. This vulnerability affects unknown code of the file /admin_paylog.php. The manipulation of the argument cstatus leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and m...

5.4CVSS3.9AI score0.00035EPSS
CVE
CVE•added 2025/05/05 10:15 p.m.•48 views

CVE-2025-44074

SeaCMS v13.3 was discovered to contain a SQL injection vulnerability via the component admin_topic.php.

9.8CVSS8.3AI score0.00049EPSS
CVE
CVE•added 2025/02/25 10:15 p.m.•47 views

CVE-2025-25515

Seacms

8.8CVSS8.1AI score0.00115EPSS
CVE
CVE•added 2025/02/26 3:15 p.m.•45 views

CVE-2025-25800

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php.

5.3CVSS7AI score0.00093EPSS
CVE
CVE•added 2025/01/06 6:15 p.m.•44 views

CVE-2024-54880

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk.

9.1CVSS6.5AI score0.02085EPSS
CVE
CVE•added 2025/04/03 7:15 p.m.•44 views

CVE-2025-29647

SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.

9.8CVSS8.1AI score0.00049EPSS
CVE
CVE•added 2025/05/05 1:15 a.m.•44 views

CVE-2025-4257

A vulnerability, which was classified as problematic, has been found in SeaCMS 13.2. This issue affects some unknown processing of the file /admin_pay.php. The manipulation of the argument cstatus leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to...

5.1CVSS6.3AI score0.00042EPSS
CVE
CVE•added 2025/01/06 6:15 p.m.•37 views

CVE-2024-54879

SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.

9.1CVSS6.5AI score0.02085EPSS
CVE
CVE•added 2025/06/17 8:15 p.m.•8 views

CVE-2024-40570

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component.

6.5CVSS7.2AI score0.00044EPSS
CVE
CVE•added 2025/06/29 4:15 p.m.•5 views

CVE-2025-6864

A vulnerability, which was classified as problematic, has been found in SeaCMS up to 13.2. Affected by this issue is some unknown functionality of the file /admin_type.php. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to t...

5.3CVSS7AI score0.00024EPSS