Security Advisory
CVE-2024-46640
9.8
CRITICAL
Vulnerability Description
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function is not executed during execution, allowing remote code execution by writing to the file through the MySQL slow query method.
Published Date
September 20, 2024
Official Source
NIST NVD Advisory