Seacms: Security Vulnerabilities
SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().
CVSS Score
9.8
EPSS Score
0.01
Published
2024-12-18
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to unsafe handling of the "notify" variable in admin_notify.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2024-11-08
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
CVSS Score
9.8
EPSS Score
0.022
Published
2024-09-20
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php.
CVSS Score
7.5
EPSS Score
0.003
Published
2024-09-09
SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.
CVSS Score
9.8
EPSS Score
0.003
Published
2024-09-09
A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the siteurl parameter.
CVSS Score
6.1
EPSS Score
0.0
Published
2024-09-03
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del.
CVSS Score
9.8
EPSS Score
0.001
Published
2024-09-03
Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php.
CVSS Score
6.1
EPSS Score
0.001
Published
2024-08-30
A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVSS Score
3.5
EPSS Score
0.001
Published
2024-08-30
Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in arbitrary command execution.
CVSS Score
7.2
EPSS Score
0.007
Published
2024-08-30