Seacms

Seacms

114 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2024-40520

Exploit
  • EPSS 2.68%
  • Veröffentlicht 12.07.2024 16:15:04
  • Zuletzt bearbeitet 21.11.2024 09:31:14

SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_config_mark.php directly splicing and writing the user input data into inc_photowatermark_config.php without processing it, which allows authenticated attacke...

9.8

CVE-2024-39028

Exploit
  • EPSS 2.66%
  • Veröffentlicht 05.07.2024 14:15:03
  • Zuletzt bearbeitet 21.11.2024 09:27:09

An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php.

7.5

CVE-2024-39027

Exploit
  • EPSS 0.11%
  • Veröffentlicht 05.07.2024 14:15:02
  • Zuletzt bearbeitet 20.03.2025 19:15:29

SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked.

9.8

CVE-2024-6416

Exploit
  • EPSS 0.1%
  • Veröffentlicht 30.06.2024 22:15:02
  • Zuletzt bearbeitet 05.04.2025 00:02:56

A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input (select(0)from(s...

9.1

CVE-2024-31611

Exploit
  • EPSS 0.16%
  • Veröffentlicht 10.06.2024 17:16:26
  • Zuletzt bearbeitet 13.03.2025 18:15:39

SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.

8.8

CVE-2024-30565

Exploit
  • EPSS 2.57%
  • Veröffentlicht 04.04.2024 08:15:07
  • Zuletzt bearbeitet 28.03.2025 16:52:54

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.

9.8

CVE-2024-29275

Exploit
  • EPSS 61.8%
  • Veröffentlicht 22.03.2024 05:15:47
  • Zuletzt bearbeitet 28.03.2025 16:51:45

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.

8.8

CVE-2023-46987

Exploit
  • EPSS 5.75%
  • Veröffentlicht 28.12.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:29:35

SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php.

5.4

CVE-2023-50470

Exploit
  • EPSS 0.21%
  • Veröffentlicht 28.12.2023 15:15:07
  • Zuletzt bearbeitet 21.11.2024 08:37:02

A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.

9.8

CVE-2023-46010

  • EPSS 0.28%
  • Veröffentlicht 25.10.2023 18:17:35
  • Zuletzt bearbeitet 21.11.2024 08:27:45

An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component.