SeaCMS

Records115All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical39CVSS 9.0–10.0

CVSS high28CVSS 7.0–8.9

Exploited now

SeaCMS records in CISA KEV

No SeaCMS vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Seacms 114 records HIGH

Records

115 records

TI-2025-21155 CVE-2025-29647 · GHSA-9grg-pp2p-gqf6

SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.

HIGH 82

SeaCMS v13.3 has a SQL injection vulnerability in the component admin_tempvideo.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00535 Published 2025-04-03 No fix listed CWE-89

TI-2025-19037 CVE-2025-25521 · GHSA-c46r-j7hv-8f85

Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.

HIGH 82

Seacms <=13.3 is vulnerable to SQL Injection in admin_type_news.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2025-02-25 No fix listed CWE-89

TI-2025-19036 CVE-2025-25520 · GHSA-c7c6-hp9w-4gmf

Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.

HIGH 82

Seacms <13.3 is vulnerable to SQL Injection in admin_pay.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2025-02-25 No fix listed CWE-89

TI-2025-19035 CVE-2025-25519 · GHSA-vhgx-6vv2-prcm

Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.

HIGH 82

Seacms <=13.3 is vulnerable to SQL Injection in admin_zyk.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2025-02-25 No fix listed CWE-89

TI-2025-19034 CVE-2025-25517 · GHSA-g635-4v3q-xmrq

Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.

HIGH 82

Seacms <=13.3 is vulnerable to SQL Injection in admin_reslib.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2025-02-25 No fix listed CWE-89

TI-2025-19033 CVE-2025-25516 · GHSA-63xm-g6f5-3cw5

Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.

HIGH 82

Seacms <=13.3 is vulnerable to SQL Injection in admin_paylog.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00522 Published 2025-02-25 No fix listed CWE-89

TI-2024-36842 CVE-2024-55461 · GHSA-j544-hhc5-ccvv

SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().

HIGH 82

SeaCMS <=13.0 is vulnerable to command execution in phome.php via the function Ebak_RepPathFiletext().

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01147 Published 2024-12-18 No fix listed CWE-77

TI-2024-31076 CVE-2024-46640 · GHSA-c83g-2v28-2jp8

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp.

HIGH 82

SeaCMS 13.2 has a remote code execution vulnerability located in the file sql.class.chp.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00999 Published 2024-09-20 No fix listed CWE-94

TI-2024-30045 CVE-2024-44921 · GHSA-h4gc-cjxx-79fw

SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter…

HIGH 82

SeaCMS v12.9 was discovered to contain a SQL injection vulnerability via the id parameter at /dmplayer/dmku/index.php?ac=del.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00648 Published 2024-09-03 No fix listed CWE-89

TI-2024-29966 CVE-2024-44721 · GHSA-mmmq-786f-84xq

SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.

HIGH 82

SeaCMS v13.1 was discovered to a Server-Side Request Forgery (SSRF) via the url parameter at /admin_reslib.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00611 Published 2024-09-09 No fix listed CWE-918

TI-2024-26162 CVE-2024-39028 · GHSA-4m48-vrcx-46f2

An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php.

HIGH 82

An issue was discovered in SeaCMS <=12.9 which allows remote attackers to execute arbitrary code via admin_ping.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0111 Published 2024-07-05 No fix listed CWE-77

TI-2023-23708 CVE-2023-44172 · GHSA-pw36-82xr-g6rw

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.

HIGH 82

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_weixin.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-09-26 No fix listed CWE-22

TI-2023-23707 CVE-2023-44171 · GHSA-8wm7-r267-8mqr

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.

HIGH 82

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_smtp.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-09-26 No fix listed CWE-22

TI-2023-23705 CVE-2023-44169 · GHSA-q5x2-c4xq-2wmv

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.

HIGH 82

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_notify.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-09-26 No fix listed CWE-22

TI-2023-23142 CVE-2023-43222 · GHSA-5wxq-q7xr-cgpw

SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file.

HIGH 82

SeaCMS v12.8 has an arbitrary code writing vulnerability in the /jxz7g2/admin_ping.php file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0097 Published 2023-09-26 No fix listed CWE-94

TI-2023-23141 CVE-2023-43216 · GHSA-hcvv-hp4h-gfwx

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php.

HIGH 82

SeaCMS V12.9 was discovered to contain an arbitrary file write vulnerability via the component admin_ip.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01375 Published 2023-09-26 No fix listed CWE-22

TI-2022-21109 CVE-2022-43256 · GHSA-g6hq-j7jf-4m9g

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the…

HIGH 82

SeaCms before v12.6 was discovered to contain a SQL injection vulnerability via the component /js/player/dmplayer/dmku/index.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00916 Published 2022-11-16 No fix listed CWE-89

TI-2024-20891 CVE-2024-31611 · GHSA-gq77-25f4-cr3x

SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.

HIGH 78

SeaCMS 12.9 has a file deletion vulnerability via admin_template.php.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00567 Published 2024-06-10 No fix listed CWE-404

TI-2019-16192 CVE-2019-25778 · GHSA-x45m-w3f3-v256

SQL injection in SeaCMS lets remote attackers read database data

HIGH 77

SeaCMS through 8.7 contains an unauthenticated SQL injection vulnerability that allows remote attackers to manipulate database queries by injecting SQL through the rlist[] array parameter.

CVSS 4.0HIGH 8.8 Network No auth No interaction EPSS 0.00461 Published 2026-10-22 No fix listed CWE-89

TI-2024-19416 CVE-2024-29275 · GHSA-hvmg-pgch-cw7v

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated…

HIGH 76

SQL injection vulnerability in SeaCMS version 12.9, allows remote unauthenticated attackers to execute arbitrary code and obtain sensitive information via the id parameter in class.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04998 Published 2024-03-22 No fix listed CWE-89

TI-2025-19032 CVE-2025-25515 · GHSA-f754-m3x7-vr78

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an…

HIGH 73

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect.php that allows an authenticated attacker to exploit the database.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00513 Published 2025-02-25 No fix listed CWE-89

TI-2024-28527 CVE-2024-42599 · GHSA-fmrv-g3hm-j6pp

SeaCMS 13.0 has a remote code execution vulnerability.

HIGH 73

SeaCMS 13.0 has a remote code execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01435 Published 2024-08-22 No fix listed CWE-94

TI-2024-26979 CVE-2024-40522 · GHSA-cxmx-p5rj-hv5g

There is a remote code execution vulnerability in SeaCMS 12.9.

HIGH 73

There is a remote code execution vulnerability in SeaCMS 12.9.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01167 Published 2024-07-12 No fix listed CWE-94

TI-2024-26978 CVE-2024-40521 · GHSA-882r-xjmv-4jmx

SeaCMS 12.9 has a remote code execution vulnerability.

HIGH 73

SeaCMS 12.9 has a remote code execution vulnerability.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01264 Published 2024-07-12 No fix listed CWE-94

TI-2024-20287 CVE-2024-30565 · GHSA-mcfm-cxwv-vq32

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.

HIGH 73

An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01613 Published 2024-04-04 No fix listed CWE-94

Open these records in search →