Total 114 security vulnerabilities recorded for seacms software and firmware.
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php....
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php....
SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php....
Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php....
Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php....
Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php....
Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php....
Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php....
Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database....
Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php....
SQL Injection vulnerability in SeaCMS v.13.2 and before allows a remote attacker to execute arbitrary code via the DoTranExecSql parameter in the phom...
Seacms <=13.3 is vulnerable to SQL Injection in admin_members.php....
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to register accounts in bulk....
SeaCMS V13.1 is vulnerable to Incorrect Access Control. A logic flaw can be exploited by an attacker to allow any user to recharge members indefinitel...
SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext()....
SeaCms 13.1 is vulnerable to code injection in the notification module of the member message notification module in the backend user module, due to un...
SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp. Although the system has a check function, the check function ...
SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php....
SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php....
SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del....
A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts o...
Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php....
A cross-site scripting (XSS) vulnerability in the component admin_datarelate.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or ...
Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php fi...