Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
seacms vulnerabilities and exploits
(subscribe to this query)
8.8
CVSSv3
CVE-2019-8418
SeaCMS 7.2 mishandles member.php?mod=repsw4 requests.
Seacms Seacms 7.2
5.4
CVSSv3
CVE-2018-19350
In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element.
Seacms Seacms 6.64
7.2
CVSSv3
CVE-2018-19349
In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php.
Seacms Seacms 6.64
7.5
CVSSv3
CVE-2018-17365
SeaCMS 6.64 and 7.2 allows remote malicious users to delete arbitrary files via the filedir parameter.
Seacms Seacms 6.64
Seacms Seacms 7.2
6.1
CVSSv3
CVE-2018-17321
An issue exists in SeaCMS 6.64. XSS exists in admin_datarelate.php via the time or maxHit parameter in a dorandomset action.
Seacms Seacms 6.64
5.3
CVSSv3
CVE-2018-16821
SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests.
Seacms Seacms 6.64
9.8
CVSSv3
CVE-2018-16822
SeaCMS 6.64 allows SQL Injection via the upload/admin/admin_video.php order parameter.
Seacms Seacms 6.64
6.1
CVSSv3
CVE-2018-17062
An issue exists in SeaCMS 6.64. XSS exists in admin_video.php via the action, area, type, yuyan, jqtype, v_isunion, v_recycled, v_ismoney, or v_ispsd parameter.
Seacms Seacms 6.64
9.8
CVSSv3
CVE-2018-16445
An issue exists in SeaCMS up to and including 6.61. SQL injection exists via the tid parameter in an adm1n/admin_topic_vod.php request.
Seacms Seacms
7.5
CVSSv3
CVE-2018-16446
An issue exists in SeaCMS up to and including 6.61. adm1n/admin_database.php allows remote malicious users to delete arbitrary files via directory traversal sequences in the bakfiles parameter. This can allow the product to be reinstalled by deleting install_lock.txt.
Seamcms Seacms
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48693
CVE-2024-30851
CVE-2024-34460
CVE-2024-2887
local
CVE-2024-27956
remote code execution
CVE-2024-34475
privilege
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2
3
4
5
6
NEXT »