An issue was discovered in SeaCMS version 12.9, allows remote attackers to execute arbitrary code via admin notify.php

SeaCMS v12.9 was discovered to contain a remote code execution (RCE) vulnerability via the component /augap/adminip.php

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ notify.php component

A Cross-Site Request Forgery (CSRF) in admin_manager.php of Seacms up to v12.8 allows attackers to arbitrarily add an admin account

SeaCMS 7.2 mishandles member.php?mod=repsw4 requests

SeaCMS v6.61 allows Remote Code execution by placing PHP code in an allowed IP address (aka ip) to /admin/admin_ip.php (aka /adm1n/admin_ip.php)

SeaCMS v6.61 allows Remote Code execution by placing PHP code in a movie picture address (aka v_pic) to /admin/admin_video.php (aka /backend/admin_video.php)

An issue was discovered in SeaCMS 6.61

An issue was discovered in SeaCMS 6.61

SeaCMS 8.7 SQL Injection via comment/api/index.php rlist Parameter

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_template.php component

SeaCMS v13.1 was discovered to an arbitrary file read vulnerability via the component admin_safe.php

SeaCMS v12.9 has an unauthorized SQL injection vulnerability

SeaCMS 6.64 and 7.2 allows remote attackers to delete arbitrary files via the filedir parameter

SeaCMS WeChat index.php addslashes sql injection

SeaCMS Locoy Collector seacms_locoy_news.php parseIf code injection

SeaCMS zyapi.php sql injection

SeaCMS Template search.php parseIf code injection

SeaCMS admin_video.php sql injection

SeaCMS Cron Task Management admin_cron.php sql injection

SeaCMS admin_topic.php sql injection

SeaCMS admin_link.php sql injection

Vulnerability in admin_ip.php in Seacms v13.1, when action=set, allows attackers to control IP parameters that are written to the data/admin/ip.php file and could result in…

An issue in SeaCMS v.12.8 allows an attacker to execute arbitrary code via the admin_ Weixin.php component

Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php

Seacms v11.6 was discovered to contain a remote command execution (RCE) vulnerability via the Mail Server Settings

In SeaCMS v6.64, there is SQL injection via the admin_makehtml.php topic parameter because of mishandling in include/mkhtml.func.php

SeaCMS 6.61 allows remote attackers to execute arbitrary code because parseIf() in include/main.class.php does not block use of $GLOBALS

SeaCMS 13.0 has a remote code execution vulnerability

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php

SeaCMS Password Change cross-site request forgery

SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php

A vulnerability was found in SeaCMS 11.6 and classified as problematic

Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account

Seacms 11.1 - 'checkuser' Stored XSS

SeaCMS admin_pay.php cross site scripting

A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…

Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php

SeaCMS index.php cross site scripting

Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php,

A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML

An issue was discovered in SeaCMS 6.64

An issue was discovered in SeaCMS 6.64

SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields

SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php

SeaCMS Comment Cache member.php del_pl path traversal

SeaCMS Avatar Upload member.php unlink path traversal

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player