Browse CVEs

HIGH 8.8 CVE-2024-42599 SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_files.php imposes restrictions on edi… Seacms No fix yet Fix from $1,9502024-08-22 MEDIUM 6.7 CVE-2024-42598 SeaCMS 13.0 has a remote code execution vulnerability. The reason for this vulnerability is that although admin_editplayer.php imposes restrictions o… Seacms No fix yet Fix from $1,6002024-08-20 MEDIUM 6.1 CVE-2024-7163 A vulnerability, which was classified as problematic, was found in SeaCMS 12.9. This affects an unknown part of the file /js/player/dmplayer/player/i… Seacms No fix yet Fix from $1,6002024-07-28 MEDIUM 6.5 CVE-2024-7161 A vulnerability classified as problematic was found in SeaCMS 13.0. Affected by this vulnerability is an unknown functionality of the file /member.ph… Seacms No fix yet Fix from $1,6002024-07-28 MEDIUM 5.4 CVE-2024-7162 A vulnerability, which was classified as problematic, has been found in SeaCMS 12.9/13.0. Affected by this issue is some unknown functionality of the… Seacms No fix yet Fix from $1,6002024-07-28 MEDIUM 6.5 CVE-2024-39036 SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php. Seacms No fix yet Fix from $1,6002024-07-16 HIGH 8.8 CVE-2024-40521 SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is due to the fact that although admin_template.php imposes certain restrict… Seacms No fix yet Fix from $1,9502024-07-12 HIGH 8.8 CVE-2024-40522 There is a remote code execution vulnerability in SeaCMS 12.9. The vulnerability is caused by phomebak.php writing some variable names passed in with… Seacms No fix yet Fix from $1,9502024-07-12 HIGH 8.8 CVE-2024-40518 SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input d… Seacms No fix yet Fix from $1,9502024-07-12 HIGH 8.8 CVE-2024-40519 SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_smtp.php directly splicing and writing the user input dat… Seacms No fix yet Fix from $1,9502024-07-12 HIGH 8.8 CVE-2024-40520 SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_config_mark.php directly splicing and writing the user in… Seacms No fix yet Fix from $1,9502024-07-12 HIGH 7.5 CVE-2024-39027 SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/playe… Seacms No fix yet Fix from $1,9502024-07-05 CRITICAL 9.8 CVE-2024-6416 A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /j… Seacms No fix yet Fix from $2,3002024-06-30 CRITICAL 9.1 CVE-2024-31611 SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. Seacms No fix yet Fix from $2,3002024-06-10 HIGH 8.8 CVE-2024-30565 An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. Seacms No fix yet Fix from $1,9502024-04-04 CRITICAL 9.8 CVE-2024-29275 SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive informatio… Seacms No fix yet Fix from $2,3002024-03-22 HIGH 8.8 CVE-2023-46987 SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. Seacms Mitigation only Fix from $1,9502023-12-28 MEDIUM 5.4 CVE-2023-50470 A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTM… Seacms No fix yet Fix from $1,6002023-12-28 CRITICAL 9.8 CVE-2023-44169 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44170 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44171 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-44172 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. Seacms No fix yet Fix from $2,3002023-09-27 CRITICAL 9.8 CVE-2023-43216 SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. Seacms No fix yet Fix from $2,3002023-09-27 MEDIUM 5.4 CVE-2023-37124 A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML … Seacms No fix yet Fix from $1,6002023-07-06 MEDIUM 5.4 CVE-2023-37125 A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scr… Seacms No fix yet Fix from $1,6002023-07-06 MEDIUM 6.5 CVE-2023-2926 A vulnerability was found in SeaCMS 11.6 and classified as problematic. This issue affects some unknown processing of the file member.php of the comp… Seacms No fix yet Fix from $1,6002023-05-27 CRITICAL 9.8 CVE-2023-0960 A vulnerability was found in SeaCMS 11.6 and classified as problematic. Affected by this issue is some unknown functionality of the file /data/config… Seacms No fix yet Fix from $2,3002023-02-22 HIGH 7.2 CVE-2022-48093 Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php. Seacms No fix yet Fix from $1,9502023-02-01 CRITICAL 9.8 CVE-2021-39426 An issue was discovered in /Upload/admin/admin_notify.php in Seacms 11.4 allows attackers to execute arbitrary php code via the notify1 parameter whe… Seacms No fix yet Fix from $2,3002022-12-15 HIGH 7.2 CVE-2022-28076 Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings. Seacms No fix yet Fix from $1,9502022-05-04