SeaCMS 13.0 has a remote code execution vulnerability

SQL Injection vulnerability in SeaCMS v.12.9 allows a remote attacker to obtain sensitive information via the admin_datarelate.php component

Seacms <=13.3 is vulnerable to SQL Injection in admin_collect_news.php

SeaCMS Password Change cross-site request forgery

SeaCMS v12.9 is vulnerable to Arbitrary File Read via admin_safe.php

A vulnerability was found in SeaCMS 11.6 and classified as problematic

Cross Site Request Forgery (CSRF) vulnerability exists in SeaCMS 10.7 in admin_manager.php, which could let a malicious user add an admin account

Seacms 11.1 - 'checkuser' Stored XSS

SeaCMS admin_pay.php cross site scripting

A cross-site scripting (XSS) vulnerability in the component admin_collect_news.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload…

Seacms v13 is vulnerable to Cross Site Scripting (XSS) via admin-video.php

SeaCMS index.php cross site scripting

Cross Site Scripting (XSS) vulnerability exists in SeaCMS 12.6 via the (1) v_company and (2) v_tvs parameters in /admin_video.php,

A cross-site scripting (XSS) vulnerability has been discovered in the login page of SeaCMS version 11 which allows an attacker to inject arbitrary web script or HTML

An issue was discovered in SeaCMS 6.64

An issue was discovered in SeaCMS 6.64

SeaCMS 6.61 has two XSS issues in the admin_config.php file via certain form fields

SeaCMS 6.61 has stored XSS in admin_collect.php via the siteurl parameter

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe.php

SeaCMS Comment Cache member.php del_pl path traversal

SeaCMS Avatar Upload member.php unlink path traversal

Cross site scripting vulnerability in seacms before 13.2 via the vid parameter to Upload/js/player/dmplayer/player

SeaCMS admin_paylog.php cross site scripting

A cross-site scripting (XSS) vulnerability in the component admin_ads.php of SeaCMS v12.9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected…

SeaCMS cross site scripting

A cross-site scripting (XSS) vulnerability in the component admin_ Video.php of SeaCMS v12.8 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

A stored cross-site scripting (XSS) vulnerability in the Management Custom label module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted…

A stored cross-site scripting (XSS) vulnerability in the Site Setup module of SEACMS v12.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload

In SeaCMS v6.6.4, there is stored XSS via the member.php?action=chgpwdsubmit email parameter during a password change, as demonstrated by a data: URL in an OBJECT element

SeaCMS ass.php authorization

SeaCMS 13.3 was discovered to contain an arbitrary file read vulnerability in the file_get_contents function at admin_safe_file.php

SeaCMS 6.64 allows arbitrary directory listing via upload/admin/admin_template.php?path=../templets/../../ requests

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_smtp.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_template.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_notify.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ping.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_files.php

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the component admin_ip.php

An information disclosure vulnerability has been discovered in SeaCMS 13.1

SeaCMS V6.61 has XSS via the admin_video.php v_content parameter, related to the site name

SeaCMS V6.61 has XSS via the site name parameter on an adm1n/admin_config.php page (aka a system management page)

SeaCMS v13.3 was discovered to contain a remote code execution (RCE) vulnerability via the isopen parameter at admin_weixin.php

SeaCMS err.php cross site scripting

SeaCMS admin_type.php cross-site request forgery