| CVE-2024-40518 | ÉLEVÉE8.8 | SeaCMS 12.9 has a remote code execution vulnerability. The vulnerability is caused by admin_weixin.php directly splicing and writing the user input data into weixin.php without processing it, which allows authenticated attackers to exploit the vulnerability to execute arbitrary commands and obtain system permissions. | 12/07/2024 |
| CVE-2024-39028 | CRITIQUE9.8 | An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php. | 05/07/2024 |
| CVE-2024-39027 | ÉLEVÉE7.5 | SeaCMS v12.9 has an unauthorized SQL injection vulnerability. The vulnerability is caused by the SQL injection through the cid parameter at /js/player/dmplayer/dmku/index.php?ac=edit, which can cause sensitive database information to be leaked. | 05/07/2024 |
| CVE-2024-6416 | CRITIQUE9.8 | A vulnerability was found in SeaCMS 12.9. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /js/player/dmplayer/dmku/?ac=edit. The manipulation of the argument cid with the input (select(0)from(select(sleep(10)))v) leads to sql injection. The attack can be launched | 30/06/2024 |
| CVE-2024-31611 | CRITIQUE9.1 | SeaCMS 12.9 has a file deletion vulnerability via admin_template.php. | 10/06/2024 |
| CVE-2024-30565 | ÉLEVÉE8.8 | An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php. | 04/04/2024 |
| CVE-2024-29275 | CRITIQUE9.8 | SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php. | 22/03/2024 |
| CVE-2023-50470 | MOYENNE5.4 | A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload. | 28/12/2023 |
| CVE-2023-46987 | ÉLEVÉE8.8 | SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php. | 28/12/2023 |
| CVE-2023-46010 | CRITIQUE9.8 | An issue in SeaCMS v.12.9 allows an attacker to execute arbitrary commands via the admin_safe.php component. | 25/10/2023 |
| CVE-2023-44848 | ÉLEVÉE8.1 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component. | 10/10/2023 |
| CVE-2023-44847 | ÉLEVÉE7.2 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component. | 10/10/2023 |
| CVE-2023-44846 | ÉLEVÉE8.8 | An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component. | 10/10/2023 |
| CVE-2023-44172 | CRITIQUE9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php. | 27/09/2023 |
| CVE-2023-44171 | CRITIQUE9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php. | 27/09/2023 |
| CVE-2023-44170 | CRITIQUE9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ping.php. | 27/09/2023 |
| CVE-2023-44169 | CRITIQUE9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php. | 27/09/2023 |
| CVE-2023-43222 | CRITIQUE9.8 | SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file. | 27/09/2023 |
| CVE-2023-43216 | CRITIQUE9.8 | SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php. | 27/09/2023 |
| CVE-2023-43278 | ÉLEVÉE8.8 | A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account. | 25/09/2023 |