SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitely.
CVSS Score
9.1
EPSS Score
0.021
Published
2025-01-06
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2024-11-08
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.
CVSS Score
7.5
EPSS Score
0.002
Published
2024-09-09
SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.
CVSS Score
9.8
EPSS Score
0.002
Published
2024-09-09
Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution.
CVSS Score
7.2
EPSS Score
0.006
Published
2024-08-30
Page 2